search

F5Networks / f5-azure-arm-templates-v2

Azure Resource Manager Templates for quickly deploying BIG-IP services in Azure
22 stars 45 forks source link

Azure *failover* template from f5-azure-arm-templates-v2/v3.0.0.0/examples/ fails to deploy. #39

Open tmarfil opened 5 months ago

tmarfil commented 5 months ago

Azure failover template from f5-azure-arm-templates-v2/v3.0.0.0/examples/ fails to deploy.

Steps to re-create:

Create Azure resource group with:

Minimal edits to the ARM template (see full template below).

Inputs provided for:

...all other parameters left default.

{
    "$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentParameters.json#",
    "contentVersion": "1.0.0.0",
    "parameters": {
        "templateBaseUrl": {
            "value": "https://cdn.f5.com/product/cloudsolutions/"
        },
        "allowUsageAnalytics": {
            "value": true
        },
        "artifactLocation": {
            "value": "f5-azure-arm-templates-v2/v3.0.0.0/examples/"
        },
        "uniqueString": {
            "value": "marfilee"
        },
        "bigIpHostname01": {
            "value": "failover01.local"
        },
        "bigIpHostname02": {
            "value": "failover02.local"
        },
        "bigIpImage": {
            "value": "f5-networks:f5-big-ip-best:f5-big-best-plus-hourly-25mbps:17.1.100002"
        },
        "bigIpInstanceType": {
            "value": "Standard_D8s_v4"
        },
        "bigIpLicenseKey01": {
            "value": "XXXXX-XXXXX-XXXXX-XXXXX-XXXXXXX"
        },
        "bigIpLicenseKey02": {
            "value": "XXXXX-XXXXX-XXXXX-XXXXX-XXXXXXX"
        },
        "bigIpPasswordSecretId": {
            "value": ""
        },
        "bigIpPasswordSecretValue": {
            "value": null
        },
        "sshKey": {
            "value": "ssh-rsa AAA..."
        },
        "provisionPublicIpMgmt": {
            "value": true
        },
        "provisionServicePublicIp": {
            "value": true
        },
        "restrictedSrcAddressMgmt": {
            "value": "0.0.0.0/0"
        },
        "restrictedSrcAddressApp": {
            "value": "0.0.0.0/0"
        },
        "numNics": {
            "value": 3
        },
        "bigIpMgmtSubnetId": {
            "value": "/subscriptions/XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX/resourceGroups/marfil-rg1/providers/Microsoft.Network/virtualNetworks/marfilee-vnet/subnets/marfilee-subnet-mgmt"
        },
        "bigIpExternalSubnetId": {
            "value": "/subscriptions/XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX/resourceGroups/marfil-rg1/providers/Microsoft.Network/virtualNetworks/marfilee-vnet/subnets/marfilee-subnet-external"
        },
        "bigIpInternalSubnetId": {
            "value": "/subscriptions/XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX/resourceGroups/marfil-rg1/providers/Microsoft.Network/virtualNetworks/marfilee-vnet/subnets/marfilee-subnet-internal"
        },
        "bigIpExternalSelfIp01": {
            "value": "10.0.1.11"
        },
        "bigIpExternalSelfIp02": {
            "value": "10.0.1.12"
        },
        "bigIpExternalVip01": {
            "value": "10.0.1.101"
        },
        "bigIpInternalSelfIp01": {
            "value": "10.0.2.11"
        },
        "bigIpInternalSelfIp02": {
            "value": "10.0.2.12"
        },
        "bigIpMgmtAddress01": {
            "value": "10.0.0.11"
        },
        "bigIpMgmtAddress02": {
            "value": "10.0.0.12"
        },
        "bigIpPeerAddr": {
            "value": "10.0.1.11"
        },
        "bigIpRuntimeInitConfig01": {
            "value": "https://raw.githubusercontent.com/F5Networks/f5-azure-arm-templates-v2/v3.0.0.0/examples/failover/bigip-configurations/runtime-init-conf-3nic-payg-instance01.yaml"
        },
        "bigIpRuntimeInitConfig02": {
            "value": "https://raw.githubusercontent.com/F5Networks/f5-azure-arm-templates-v2/v3.0.0.0/examples/failover/bigip-configurations/runtime-init-conf-3nic-payg-instance02.yaml"
        },
        "bigIpRuntimeInitPackageUrl": {
            "value": "https://cdn.f5.com/product/cloudsolutions/f5-bigip-runtime-init/v2.0.1/dist/f5-bigip-runtime-init-2.0.1-1.gz.run"
        },
        "cfeStorageAccountName": {
            "value": ""
        },
        "cfeTag": {
            "value": "bigip_high_availability_solution"
        },
        "useAvailabilityZones": {
            "value": false
        },
        "bigIpUserAssignManagedIdentity": {
            "value": ""
        },
        "tagValues": {
            "value": {
                "application": "f5demoapp",
                "cost": "f5cost",
                "environment": "f5env",
                "group": "f5group",
                "owner": "f5owner"
            }
        }
    }
}
DeploymentFailed:
VM has reported a failure when processing extension 'onboarder' (publisher 'Microsoft.Azure.Extensions' and type 'CustomScript'). Error message: 'Enable failed: failed to execute command: command terminated with exit status=1
[stdout]

VM has reported a failure when processing extension 'onboarder' (publisher 'Microsoft.Azure.Extensions' and type 'CustomScript'). Error message: 'Enable failed: failed to execute command: command terminated with exit status=1
[stdout]

lowService":["tcp:443","udp:1026","tcp:4353","tcp:6123","tcp:6124","tcp:6125","tcp:6126","tcp:6127","tcp:6128"],"trafficGroup":"traffic-group-local-only"},"internal":{"class":"VLAN","interfaces":[{"name":"1.2","tagged":false}],"mtu":1500,"tag":4093},"internal-self":{"class":"SelfIp","address":"10.0.2.12/24","vlan":"internal","allowService":"none","trafficGroup":"traffic-group-local-only"}}}
2024-03-19T20:25:12.318Z [21218]: info: Creating - cf 2.0.2 {"schemaVersion":"1.0.0","class":"Cloud_Failover","environment":"azure","controls":{"class":"Controls","logLevel":"silly"},"externalStorage":{"scopingTags":{"f5_cloud_failover_label":"bigip_high_availability_solution"}},"failoverAddresses":{"enabled":true,"scopingTags":{"f5_cloud_failover_label":"bigip_high_availability_solution"},"requireScopingTags":false}}
2024-03-19T20:25:22.461Z [21218]: info: Creating - do 1.41.0 {"schemaVersion":"1.0.0","class":"Device","async":true,"label":"Failover 3NIC BIG-IP declaration for Declarative Onboarding with PAYG license","Common":{"class":"Tenant","My_DbVariables":{"class":"DbVariables","dhclient.mgmt":"disable","config.allow.rfc3927":"enable","tm.tcpudptxchecksum":"Software-only"},"My_Provisioning":{"class":"Provision","ltm":"nominal"},"My_Ntp":{"class":"NTP","servers":["0.pool.ntp.org","1.pool.ntp.org"],"timezone":"UTC"},"My_Dns":{"class":"DNS","nameServers":["168.63.129.16"]},"My_System":{"autoPhonehome":true,"class":"System","hostname":"failover02.local"},"admin":{"class":"User","userType":"regular","password":"********","shell":"bash"},"default":{"class":"ManagementRoute","gw":"10.0.0.1","network":"default"},"dhclient_route1":{"class":"ManagementRoute","gw":"10.0.0.1","network":"168.63.129.16/32"},"azureMetadata":{"class":"ManagementRoute","gw":"10.0.0.1","network":"169.254.169.254/32"},"defaultRoute":{"class":"Route","gw":"10.0.1.1","network":"default","mtu":1500},"external":{"class":"VLAN","tag":4094,"mtu":1500,"interfaces":[{"name":"1.1","tagged":false}]},"external-self":{"class":"SelfIp","address":"10.0.1.12/24","vlan":"external","allowService":["tcp:443","udp:1026","tcp:4353","tcp:6123","tcp:6124","tcp:6125","tcp:6126","tcp:6127","tcp:6128"],"trafficGroup":"traffic-group-local-only"},"internal":{"class":"VLAN","interfaces":[{"name":"1.2","tagged":false}],"mtu":1500,"tag":4093},"internal-self":{"class":"SelfIp","address":"10.0.2.12/24","vlan":"internal","allowService":"none","trafficGroup":"traffic-group-local-only"},"configSync":{"class":"ConfigSync","configsyncIp":"/Common/external-self/address"},"failoverAddress":{"class":"FailoverUnicast","address":"/Common/external-self/address"},"failoverGroup":{"class":"DeviceGroup","type":"sync-failover","members":["failover01.local","failover02.local"],"owner":"/Common/failoverGroup/members/0","autoSync":true,"saveOnAutoSync":false,"networkFailover":true,"fullLoadOnSync":false,"asmSync":false},"trust":{"class":"DeviceTrust","localUsername":"admin","localPassword":"********","remoteHost":"10.0.1.11","remoteUsername":"admin","remotePassword":"********"}}}
2024-03-19T20:42:04.407Z [21218]: error: 
2024-03-19T20:42:04.409Z [21218]: info: Sending F5 Teem report for failure case.
2024-03-19T20:42:05.119Z [21218]: info: {"id":"f8cc61a4-b7e4-a841-0ab8e6491e55","product":"BIG-IP","cpuCount":8,"diskSize":86016,"memoryInMb":32176,"version":"17.1.1","nicCount":3,"regKey":"XXXXX-XXXXX-XXXXX-XXXXX-XXXXXXX","platformId":"Z100","hostname":"failover02.local","management":"10.0.0.12/24","provisionedModules":{"ltm":"nominal"},"installedPackages":{"f5-service-discovery-1.16.0-2.noarch":"1.16.0","f5-declarative-onboarding-1.41.0-8.noarch":"1.41.0","f5-cloud-failover-2.0.2-2.noarch":"2.0.2","f5-appsvcs-3.48.0-10.noarch":"3.48.0"},"environment":{"pythonVersion":"Python 2.7.5","pythonVersionDetailed":"2.7.5 (default, Oct 20 2023, 04:12:19) \n[GCC 4.8.5 20150623 (Red Hat 4.8.5-16)]","nodeVersion":"v6.9.1","libraries":{"ssh":"OpenSSH_7.4p1, OpenSSL 1.0.2za-fips  24 Aug 2021"}}}
2024-03-19T20:42:10.930Z [21218]: info: F5 Teem report was successfully sent for failure case.
2024-03-19T20:42:10.931Z [21218]: info:
kay-matsumoto commented 5 months ago

I have the similar issue where the deployment just hangs. I logged into the terminal view and grabbed a few screen shots. I am using the "Install on existing infrastructure" from the github.

image image image image