search

F5Networks / f5-aws-cloudformation-v2

AWS Cloudformation Templates for quickly deploying BIG-IP services in AWS
12 stars 21 forks source link

Failover with BIG-IQ licensing #34

Closed PiotrBratkowski closed 1 year ago

PiotrBratkowski commented 1 year ago

Hello,

Can you provide example with Failover deployment with licensing from BIG-IQ?

Regards, Piotr Bratkowski

mikeshimkus commented 1 year ago

Hi @PiotrBratkowski, there are currently no plans to publish a failover example that licenses the BIG-IP instances via BIG-IQ. I can describe the process of customizing the runtime init configuration/template if that would be helpful to you. thanks

PiotrBratkowski commented 1 year ago

Hello @mikeshimkus I've already did it. Almost, it gets license, but cluster is not forming, which is strange as I'm using basically parts of failover configuration. Maybe you can look and tell me if you see something missing/wrong with this. Additionally I don't understand why DO is done twice. If you can describe this process that would be helpful also. runtime-init-conf-3nic-bigiq-1.txt

mikeshimkus commented 1 year ago

DO runs twice because of a race condition due to the unpredictability of which device will boot up first; the cluster config must be created last on both devices to prevent sync issues.

About the clustering in your case, I see that you are pointing to local files to get both secret values (for BIG-IP and BIG-IQ password) but by default, the bigip module only supports a single secret passed from the template: https://github.com/F5Networks/f5-aws-cloudformation-v2/blob/a4d715d3c22fed7d779e1cd693c008636a464672/examples/modules/bigip-standalone/bigip-standalone.yaml#L1225

Did you also customize the bigip template to support an extra secret? Also, can you share the output of /var/log/cloud/startup-script.log? thanks

shyawnkarim commented 1 year ago

Closing.

If you still need assistance, leave a message here and I can reopen the issue.