Bug ID 991061: Admin cannot edit the tenant config in Deployed state from GUI if the tenants are created via CLI; downgrading partition or rSeries appliance may leave device inoperative

Last Modified: Dec 07, 2023

Affected Product(s):
F5OS F5OS, Velos(all modules)

Known Affected Versions:
F5OS-A 1.0.0, F5OS-A 1.0.1, F5OS-C 1.1.0, F5OS-C 1.1.1, F5OS-C 1.1.2, F5OS-C 1.1.3, F5OS-C 1.1.4

Fixed In:
F5OS-C 1.3.0, F5OS-A 1.1.0, F5OS-A 1.1.0

Opened: Feb 06, 2021

Severity: 3-Major

Symptoms

Trying to modify a tenant via the GUI or API may not work if the tenant was created via the CLI, and is deployed. Attempting to downgrade an rSeries appliance from F5OS-A 1.1.0 or above to F5OS-A 1.0.x may fail if the device has any tenants deployed. This leaves the system inoperative, with errors similar to the following in /var/F5/system/log/confd.log: <CRIT> 5-Jun-2022::03:17:21.056 appliance-1 confd[105]: - CDB: Upgrade failed: Upgrade transaction failed to validate: /f5-tenants:tenants/tenant{otters}/config/storage/size (value "90"): Storage size can be modified only if tenant is in Configured or Provisioned state. Attempting to downgrade an F5OS-C partition from F5OS-C 1.3.0 or above to F5OS-C 1.2.1 or below may fail if the partition has any tenants deployed. The partition should continue running on the "from" target version.

Impact

Admin cannot scale up/scale down the cluster using the GUI if the tenant is initially deployed via CLI. Downgrades of F5OS-A appliance or F5OS-C partition may fail or leave the system inoperative.

Conditions

Admin creates the tenant via CLI and subsequently edits the following tenant config when the running-state is set to Deployed: -- Scale-up/Scale-down the tenant. -- Add/Remove VLAN.

Workaround

Use the CLI to scale-up/scale-down and add/remove the VLAN to the tenant. When performing a downgrade, set the tenants to Provisioned first.

Fix Information

None

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips