search

F5Networks / f5-azure-arm-templates

Azure Resource Manager Templates for quickly deploying BIG-IP services in Azure
84 stars 118 forks source link

Marketplace Big-IQ v6.0 in Azure fails #86

Closed cpufxr33 closed 1 year ago

cpufxr33 commented 6 years ago

Description

I can bring up a Big-IQ web browser but I cannot login with the credentials I put in from the Marketplace.

My deployment fails with this error

"status": "Failed", "error": { "code": "ResourceDeploymentFailure", "message": "The resource operation completed with terminal provisioning state 'Failed'.", "details": [ { "code": "OSProvisioningTimedOut", "message": "OS Provisioning for VM 'xxxxxxxxx' did not finish in the allotted time. The VM may still finish provisioning successfully. Please check provisioning state later."

Template

For bugs, enter the template with which you are experiencing issues below.

Severity Level

For bugs, enter the bug severity level. Do not set any labels.

Severity: <Fill in level: 1 through 5>

Severity level definitions:

  1. Severity 1 (Critical) : Defect is causing systems to be offline and/or nonfunctional. immediate attention is required. .
jsevedge commented 6 years ago

@cpufxr33 I was able to successfully deploy a BIG-IQ from marketplace and login to the GUI. Are you able to log in via ssh?

cpufxr33 commented 6 years ago

Hello James,

No, I get Access denied with my credentials.

I’ve deployed it 5 times with different VM sizes and continue to get the same time out error. Maybe it’s something in the sysprep reading this. https://social.msdn.microsoft.com/forums/azure/en-us/8dcef022-7e45-4b40-ad30-4434a3c3ce0b/virtual-machine-provisioning-timeout

Thanks, Derrick

Derrick Washington IAM Network Engineer (VA Contractor) Network Support for IAM – TO61

[cid:image001.png@01D1DB62.26BD1960][cid:image002.png@01D2523F.2AD22C80]

3877 Fairfax Ridge Road, Suite 205C Fairfax, Virginia 22030 Office: 703.268.5525 x156 Mobile: 571.436.3779 derrick.washington1@va.govmailto:eduardo.laguerre@va.gov dwashington@technatomy.commailto:elaguerre@technatomy.com www.technatomy.comhttp://www.technatomy.com/ vaww.iam.va.gov<../../../../../slance/Desktop/IAM_2016%20MASTER/Welcome%20Package/Signature%20Block/vaww.iam.va.gov>

From: James Sevedge [mailto:notifications@github.com] Sent: Tuesday, July 17, 2018 12:04 PM To: F5Networks/f5-azure-arm-templates f5-azure-arm-templates@noreply.github.com Cc: Washington, Derrick L. (Technatomy) Derrick.Washington1@va.gov; Mention mention@noreply.github.com Subject: [EXTERNAL] Re: [F5Networks/f5-azure-arm-templates] Marketplace Big-IQ v6.0 in Azure fails (#86)

@cpufxr33https://github.com/cpufxr33 I was able to successfully deploy a BIG-IQ from marketplace and login to the GUI. Are you able to log in via ssh?

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHubhttps://github.com/F5Networks/f5-azure-arm-templates/issues/86#issuecomment-405636221, or mute the threadhttps://github.com/notifications/unsubscribe-auth/AlYGp4FxK2k2YS9KhwHwuk1MUfcELhIIks5uHgrTgaJpZM4VSC7J.

jsevedge commented 6 years ago

Are you using the same password each time? My first thought would be to check if the password used contains characters described in this support article: https://support.f5.com/csp/article/K2873

cpufxr33 commented 6 years ago

No none of those characters are being used. It would give me an error as I’m setting up the USN\PW in the deployment wizard.

Thanks, Derrick

Derrick Washington IAM Network Engineer (VA Contractor) Network Support for IAM – TO61

[cid:image001.png@01D1DB62.26BD1960][cid:image002.png@01D2523F.2AD22C80]

3877 Fairfax Ridge Road, Suite 205C Fairfax, Virginia 22030 Office: 703.268.5525 x156 Mobile: 571.436.3779 derrick.washington1@va.govmailto:eduardo.laguerre@va.gov dwashington@technatomy.commailto:elaguerre@technatomy.com www.technatomy.comhttp://www.technatomy.com/ vaww.iam.va.gov<../../../../../slance/Desktop/IAM_2016%20MASTER/Welcome%20Package/Signature%20Block/vaww.iam.va.gov>

From: James Sevedge [mailto:notifications@github.com] Sent: Tuesday, July 17, 2018 12:17 PM To: F5Networks/f5-azure-arm-templates f5-azure-arm-templates@noreply.github.com Cc: Washington, Derrick L. (Technatomy) Derrick.Washington1@va.gov; Mention mention@noreply.github.com Subject: [EXTERNAL] Re: [F5Networks/f5-azure-arm-templates] Marketplace Big-IQ v6.0 in Azure fails (#86)

Are you using the same password each time? My first thought would be to check if the password used contains characters described in this support article: https://support.f5.com/csp/article/K2873

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHubhttps://github.com/F5Networks/f5-azure-arm-templates/issues/86#issuecomment-405640563, or mute the threadhttps://github.com/notifications/unsubscribe-auth/AlYGpyp308k2ekCIODEiMHla_pn4bI4lks5uHg3xgaJpZM4VSC7J.

cpufxr33 commented 6 years ago

It must be failing before the USN\PW is completed in the script since I can’t SSH to it.

Thanks, Derrick

Derrick Washington IAM Network Engineer (VA Contractor) Network Support for IAM – TO61

[cid:image001.png@01D1DB62.26BD1960][cid:image002.png@01D2523F.2AD22C80]

3877 Fairfax Ridge Road, Suite 205C Fairfax, Virginia 22030 Office: 703.268.5525 x156 Mobile: 571.436.3779 derrick.washington1@va.govmailto:eduardo.laguerre@va.gov dwashington@technatomy.commailto:elaguerre@technatomy.com www.technatomy.comhttp://www.technatomy.com/ vaww.iam.va.gov<../../../../../slance/Desktop/IAM_2016%20MASTER/Welcome%20Package/Signature%20Block/vaww.iam.va.gov>

From: James Sevedge [mailto:notifications@github.com] Sent: Tuesday, July 17, 2018 12:17 PM To: F5Networks/f5-azure-arm-templates f5-azure-arm-templates@noreply.github.com Cc: Washington, Derrick L. (Technatomy) Derrick.Washington1@va.gov; Mention mention@noreply.github.com Subject: [EXTERNAL] Re: [F5Networks/f5-azure-arm-templates] Marketplace Big-IQ v6.0 in Azure fails (#86)

Are you using the same password each time? My first thought would be to check if the password used contains characters described in this support article: https://support.f5.com/csp/article/K2873

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHubhttps://github.com/F5Networks/f5-azure-arm-templates/issues/86#issuecomment-405640563, or mute the threadhttps://github.com/notifications/unsubscribe-auth/AlYGpyp308k2ekCIODEiMHla_pn4bI4lks5uHg3xgaJpZM4VSC7J.

cpufxr33 commented 6 years ago

James,

I have a colleague deploying it to see if it’s something with my permissions or it’s in our Azure portal.

Thanks for reaching out.

Thanks, Derrick

Derrick Washington IAM Network Engineer (VA Contractor) Network Support for IAM – TO61

[cid:image001.png@01D1DB62.26BD1960][cid:image002.png@01D2523F.2AD22C80]

3877 Fairfax Ridge Road, Suite 205C Fairfax, Virginia 22030 Office: 703.268.5525 x156 Mobile: 571.436.3779 derrick.washington1@va.govmailto:eduardo.laguerre@va.gov dwashington@technatomy.commailto:elaguerre@technatomy.com www.technatomy.comhttp://www.technatomy.com/ vaww.iam.va.gov<../../../../../slance/Desktop/IAM_2016%20MASTER/Welcome%20Package/Signature%20Block/vaww.iam.va.gov>

From: James Sevedge [mailto:notifications@github.com] Sent: Tuesday, July 17, 2018 12:17 PM To: F5Networks/f5-azure-arm-templates f5-azure-arm-templates@noreply.github.com Cc: Washington, Derrick L. (Technatomy) Derrick.Washington1@va.gov; Mention mention@noreply.github.com Subject: [EXTERNAL] Re: [F5Networks/f5-azure-arm-templates] Marketplace Big-IQ v6.0 in Azure fails (#86)

Are you using the same password each time? My first thought would be to check if the password used contains characters described in this support article: https://support.f5.com/csp/article/K2873

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHubhttps://github.com/F5Networks/f5-azure-arm-templates/issues/86#issuecomment-405640563, or mute the threadhttps://github.com/notifications/unsubscribe-auth/AlYGpyp308k2ekCIODEiMHla_pn4bI4lks5uHg3xgaJpZM4VSC7J.

jsevedge commented 6 years ago

One other thought on this, are you by chance deploying into an existing VNET that is using custom DNS?

cpufxr33 commented 6 years ago

Yes

Thanks, Derrick

Derrick Washington IAM Network Engineer (VA Contractor) Network Support for IAM – TO61

[cid:image001.png@01D1DB62.26BD1960][cid:image002.png@01D2523F.2AD22C80]

3877 Fairfax Ridge Road, Suite 205C Fairfax, Virginia 22030 Office: 703.268.5525 x156 Mobile: 571.436.3779 derrick.washington1@va.govmailto:eduardo.laguerre@va.gov dwashington@technatomy.commailto:elaguerre@technatomy.com www.technatomy.comhttp://www.technatomy.com/ vaww.iam.va.gov<../../../../../slance/Desktop/IAM_2016%20MASTER/Welcome%20Package/Signature%20Block/vaww.iam.va.gov>

From: James Sevedge [mailto:notifications@github.com] Sent: Wednesday, July 18, 2018 11:55 AM To: F5Networks/f5-azure-arm-templates f5-azure-arm-templates@noreply.github.com Cc: Washington, Derrick L. (Technatomy) Derrick.Washington1@va.gov; Mention mention@noreply.github.com Subject: [EXTERNAL] Re: [F5Networks/f5-azure-arm-templates] Marketplace Big-IQ v6.0 in Azure fails (#86)

One other thought on this, are you by chance deploying into an existing VNET that is using custom DNS?

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHubhttps://github.com/F5Networks/f5-azure-arm-templates/issues/86#issuecomment-405981765, or mute the threadhttps://github.com/notifications/unsubscribe-auth/AlYGp8XqDhbxFuoyjcsZTHWYUCd1ap52ks5uH1pLgaJpZM4VSC7J.

cpufxr33 commented 6 years ago

James, I think we found the issue in the logs. It may be a Azure fabric issue or DNS. It stays in a continuously loop until it times out. It should only take about 15-15 mins to deploy, not 40 mins as it’s taking now.

Thanks, Derrick

Derrick Washington IAM Network Engineer (VA Contractor) Network Support for IAM – TO61

[cid:image001.png@01D1DB62.26BD1960][cid:image002.png@01D2523F.2AD22C80]

3877 Fairfax Ridge Road, Suite 205C Fairfax, Virginia 22030 Office: 703.268.5525 x156 Mobile: 571.436.3779 derrick.washington1@va.govmailto:eduardo.laguerre@va.gov dwashington@technatomy.commailto:elaguerre@technatomy.com www.technatomy.comhttp://www.technatomy.com/ vaww.iam.va.gov<../../../../../slance/Desktop/IAM_2016%20MASTER/Welcome%20Package/Signature%20Block/vaww.iam.va.gov>

From: James Sevedge [mailto:notifications@github.com] Sent: Wednesday, July 18, 2018 11:55 AM To: F5Networks/f5-azure-arm-templates f5-azure-arm-templates@noreply.github.com Cc: Washington, Derrick L. (Technatomy) Derrick.Washington1@va.gov; Mention mention@noreply.github.com Subject: [EXTERNAL] Re: [F5Networks/f5-azure-arm-templates] Marketplace Big-IQ v6.0 in Azure fails (#86)

One other thought on this, are you by chance deploying into an existing VNET that is using custom DNS?

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHubhttps://github.com/F5Networks/f5-azure-arm-templates/issues/86#issuecomment-405981765, or mute the threadhttps://github.com/notifications/unsubscribe-auth/AlYGp8XqDhbxFuoyjcsZTHWYUCd1ap52ks5uH1pLgaJpZM4VSC7J.

cpufxr33 commented 6 years ago

The message you tried to open is protected with Information Rights Management and can be opened using Microsoft Office Outlook 2010 or the standard version of Outlook Web App. Download a free trial of Microsoft Office Outlook from http://go.microsoft.com/fwlink/?LinkID=147091&clcid=0x409.

jsevedge commented 6 years ago

I believe this is related to custom DNS, which is a known issue affecting BIG-IP deployments. I believe it could also be what is causing your BIG-IQ deployment to fail. If you deploy into a VNET without custom DNS does it succeed?

cpufxr33 commented 6 years ago

Thanks James. This is the Big-IQ log.

Thanks, Derrick

Derrick Washington IAM Network Engineer (VA Contractor) Network Support for IAM – TO61

[cid:image001.png@01D1DB62.26BD1960][cid:image002.png@01D2523F.2AD22C80]

3877 Fairfax Ridge Road, Suite 205C Fairfax, Virginia 22030 Office: 703.268.5525 x156 Mobile: 571.436.3779 derrick.washington1@va.govmailto:eduardo.laguerre@va.gov dwashington@technatomy.commailto:elaguerre@technatomy.com www.technatomy.comhttp://www.technatomy.com/ vaww.iam.va.gov<../../../../../slance/Desktop/IAM_2016%20MASTER/Welcome%20Package/Signature%20Block/vaww.iam.va.gov>

From: James Sevedge [mailto:notifications@github.com] Sent: Thursday, July 19, 2018 7:45 PM To: F5Networks/f5-azure-arm-templates f5-azure-arm-templates@noreply.github.com Cc: Washington, Derrick L. (Technatomy) Derrick.Washington1@va.gov; Mention mention@noreply.github.com Subject: [EXTERNAL] Re: [F5Networks/f5-azure-arm-templates] Marketplace Big-IQ v6.0 in Azure fails (#86)

I believe this is related to custom DNS, which is a known issue affecting BIG-IP deployments. I believe it could also be what is causing your BIG-IQ deployment to fail. If you deploy into a VNET without custom DNS does it succeed?

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHubhttps://github.com/F5Networks/f5-azure-arm-templates/issues/86#issuecomment-406446810, or mute the threadhttps://github.com/notifications/unsubscribe-auth/AlYGp25vNis9tY-AyYYLrZNnLd5nqR-wks5uIRoJgaJpZM4VSC7J.

cpufxr33 commented 6 years ago

James,

We’re having an issue with the template you fixed for us (Jeremiah Fowler).

Can you tell us in this error log where the blob.core.windows.net file is located in the script

Thanks, Derrick

Derrick Washington IAM Network Engineer (VA Contractor) Network Support for IAM – TO61

[cid:image001.png@01D1DB62.26BD1960][cid:image002.png@01D2523F.2AD22C80]

3877 Fairfax Ridge Road, Suite 205C Fairfax, Virginia 22030 Office: 703.268.5525 x156 Mobile: 571.436.3779 derrick.washington1@va.govmailto:eduardo.laguerre@va.gov dwashington@technatomy.commailto:elaguerre@technatomy.com www.technatomy.comhttp://www.technatomy.com/ vaww.iam.va.gov<../../../../../slance/Desktop/IAM_2016%20MASTER/Welcome%20Package/Signature%20Block/vaww.iam.va.gov>

From: James Sevedge [mailto:notifications@github.com] Sent: Thursday, July 19, 2018 7:45 PM To: F5Networks/f5-azure-arm-templates f5-azure-arm-templates@noreply.github.com Cc: Washington, Derrick L. (Technatomy) Derrick.Washington1@va.gov; Mention mention@noreply.github.com Subject: [EXTERNAL] Re: [F5Networks/f5-azure-arm-templates] Marketplace Big-IQ v6.0 in Azure fails (#86)

I believe this is related to custom DNS, which is a known issue affecting BIG-IP deployments. I believe it could also be what is causing your BIG-IQ deployment to fail. If you deploy into a VNET without custom DNS does it succeed?

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHubhttps://github.com/F5Networks/f5-azure-arm-templates/issues/86#issuecomment-406446810, or mute the threadhttps://github.com/notifications/unsubscribe-auth/AlYGp25vNis9tY-AyYYLrZNnLd5nqR-wks5uIRoJgaJpZM4VSC7J.

jsevedge commented 6 years ago

Hello Derrick, Is this related to the BIG-IQ issue. If i recall that was an update for the BIG-IP failover/via-api solution.

cpufxr33 commented 6 years ago

Files for Failover

Thanks, Derrick

Derrick Washington IAM Network Engineer (VA Contractor) Network Support for IAM – TO61

[cid:image001.png@01D1DB62.26BD1960][cid:image002.png@01D2523F.2AD22C80]

3877 Fairfax Ridge Road, Suite 205C Fairfax, Virginia 22030 Office: 703.268.5525 x156 Mobile: 571.436.3779 derrick.washington1@va.govmailto:eduardo.laguerre@va.gov dwashington@technatomy.commailto:elaguerre@technatomy.com www.technatomy.comhttp://www.technatomy.com/ vaww.iam.va.gov<../../../../../slance/Desktop/IAM_2016%20MASTER/Welcome%20Package/Signature%20Block/vaww.iam.va.gov>

From: Washington, Derrick L. (Technatomy) Sent: Monday, July 23, 2018 2:13 PM To: F5Networks/f5-azure-arm-templates reply@reply.github.com; F5Networks/f5-azure-arm-templates f5-azure-arm-templates@noreply.github.com Cc: Mention mention@noreply.github.com Subject: RE: [EXTERNAL] Re:F5 Big-IP HA Cluster

James,

We’re having an issue with the template you fixed for us (Jeremiah Fowler).

Can you tell us in this error log where the blob.core.windows.net file is located in the script

Thanks, Derrick

Derrick Washington IAM Network Engineer (VA Contractor) Network Support for IAM – TO61

[cid:image001.png@01D1DB62.26BD1960][cid:image002.png@01D2523F.2AD22C80]

3877 Fairfax Ridge Road, Suite 205C Fairfax, Virginia 22030 Office: 703.268.5525 x156 Mobile: 571.436.3779 derrick.washington1@va.govmailto:eduardo.laguerre@va.gov dwashington@technatomy.commailto:elaguerre@technatomy.com www.technatomy.comhttp://www.technatomy.com/ vaww.iam.va.gov<../../../../../slance/Desktop/IAM_2016%20MASTER/Welcome%20Package/Signature%20Block/vaww.iam.va.gov>

From: James Sevedge [mailto:notifications@github.com] Sent: Thursday, July 19, 2018 7:45 PM To: F5Networks/f5-azure-arm-templates f5-azure-arm-templates@noreply.github.com<mailto:f5-azure-arm-templates@noreply.github.com> Cc: Washington, Derrick L. (Technatomy) Derrick.Washington1@va.gov<mailto:Derrick.Washington1@va.gov>; Mention mention@noreply.github.com<mailto:mention@noreply.github.com> Subject: [EXTERNAL] Re: [F5Networks/f5-azure-arm-templates] Marketplace Big-IQ v6.0 in Azure fails (#86)

I believe this is related to custom DNS, which is a known issue affecting BIG-IP deployments. I believe it could also be what is causing your BIG-IQ deployment to fail. If you deploy into a VNET without custom DNS does it succeed?

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHubhttps://github.com/F5Networks/f5-azure-arm-templates/issues/86#issuecomment-406446810, or mute the threadhttps://github.com/notifications/unsubscribe-auth/AlYGp25vNis9tY-AyYYLrZNnLd5nqR-wks5uIRoJgaJpZM4VSC7J.

ghost commented 5 years ago

I am running into this same issue. I can deploy the LTM on a vnet with default DNS, but not on a vnet with custom DNS. Is there a specialized template that can be used?

JeffGiroux commented 5 years ago

My customer is hitting same issue. Is there a workaround?

carpedm13 commented 5 years ago

@JeffGiroux
I was able to get a deployment successfully working by configuring the individual NIC with the default deployment of Azure DNS at 168.63.129.16. Deployed via ARM adding the following to the Network Interface Resource Properties

"dnsSettings": { "dnsServers": [ "168.63.129.16" ] } This allowed me to get the device functional. I was able to change the DNS back to inherited from the VNET after deployment, and successfully login.

jsevedge commented 5 years ago

To summarize this thread, BIG-IQ may run into provisioning issue when using custom DNS. To work around this in the template you can add "dnsSettings": { "dnsServers": [ "168.63.129.16" ] } to the MGMT nic (which applies to both BIG-IP and BIG-IQ affected version): https://github.com/F5Networks/f5-azure-arm-templates/blob/master/experimental/bigiq/licenseManagement/standalone/2nic/existing-stack/byol/azuredeploy.json

To track templates using a fixed version of BIG-IQ and/or adding workaround into the BIG-IQ template directly, ID 1193 created for that specifically.

shyawnkarim commented 1 year ago

Closing due to age. These legacy templates are now in maintenance mode and are being replaced by our next-generation templates available in the Cloud Templates 2.0 GitHub repo.