Last Modified: Oct 19, 2025
Affected Product(s):
F5OS Velos
Known Affected Versions:
F5OS-C 1.8.0, F5OS-C 1.8.1
Fixed In:
F5OS-C 1.8.2
Opened: Sep 26, 2025 Severity: 2-Critical
Due a race condition on update the apiserver certificate during upgrade, the ServiceCatalogInstall status in the "show cluster" output may show as failed.
The ServiceCatalogInstall status in the "show cluster" output will show as failed, and several pods may show in error state.
This can happen on upgrade from a pre 1.8.1-EHF-6 release to 1.8.1-EHF-6.
As the root user from the active controller: docker exec orchestration_manager sed -i.bak s/force=0/force=1/ /usr/omd/scripts/check_apiserver_certs.sh; sleep 300; docker exec orchestration_manager sed -i.bak s/force=1/force=0/ /usr/omd/scripts/check_apiserver_certs.sh This will cause orchestration-manager to re-run the certificate updates, which will re-run the ServiceCatalogInstall playbook and fix the status in show cluster
Orchestration-manager has been updated to wait until rolling upgrade is done before updating the apiserver certificate.