Bug ID 1315121: Key migration failure and potential corruption updating to 1.5.0 or later with deployed tenants

Last Modified: May 29, 2024

Affected Product(s):
F5OS Velos(all modules)

Known Affected Versions:
F5OS-A 1.5.0

Fixed In:
F5OS-C 1.6.0, F5OS-A 1.7.0, F5OS-A 1.5.2, F5OS-A 1.5.1

Opened: Jun 29, 2023

Severity: 1-Blocking

Symptoms

When setting a new primary key after upgrading from an older release (such as 1.1.1 or older), where tenants are deployed, to 1.5.0 or newer, the key migration may fail. The migration failure may cause configuration database corruption for the entire system.

Impact

Setting a new primary key may fail. When this failure occurs, system configuration corruption may occur.

Conditions

Tenants are deployed on release 1.1.1 or older. Upgrade to 1.5.0 or newer (including through intermediate upgrades, such as 1.1.1 -> 1.3.2 -> 1.5.1). Set new primary key.

Workaround

Mitigation to prevent failure: - Change all tenants to the configured state - Set a new primary key - Wait for key migration to complete - Return tenants to deployed state. Recovery for corruption: - Reset device to default configuration - Set the primary key to the known primary key for a known-good backup - Restore with known-good backup

Fix Information

Fix known causes of database corruption on primary key migration failure. While the primary key configuration may still fail if tenants are in deployed state, it should no longer cause system corruption.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips