F5Networks / k8s-bigip-ctlr

Repository for F5 Container Ingress Services for Kubernetes & OpenShift.
Apache License 2.0
357 stars 195 forks source link

Issue updating BIGIP using AS3 - BIGIP controller 2.16.0 #3357

Open wheestermans31 opened 6 months ago

wheestermans31 commented 6 months ago

Setup Details

CIS Version : 2.16.0
Build: f5networks/k8s-bigip-ctlr:2.16.0 Agent Mode: AS3 Orchestration: OpenShift
Orchestration Version:
Pool Mode: Cluster

Description

For some reason I start to get 422 return codes on update partition using AS3:

The folder /AS3-OpenShift-ocp-behoi-01/http-router cannot be deleted because it contains configuration item (folder /AS3-OpenShift-ocp-behoi-01/http-router/Drafts

2024/03/27 18:53:54 [DEBUG] [AS3] Raw response from Big-IP: map[code:422 declaration:map[AS3-OpenShift-ocp-behoi-01:map[class:Tenant http-router:map[class:Application forward_policy:map[class:Endpoint_Policy rules:[map[actions:[map[disable:map[] event:request sourceAddress:map[timeout:1800] type:persist] map[event:request select:map[pool:map[use:web_pool_http]] type:forward]] conditions:[map[path:map[operand:equals values:[internal-docker-k8s-test-deploytestjetty-prd.toyota-europe.com ]] type:httpUri]] name:forward_prod_test-deploytestjetty]]] http-service:map[class:Service_HTTP persistenceMethods:[] policyEndpoint:forward_policy pool:web_pool_http virtualAddresses:[10.100.4.138]] web_pool_http:map[class:Pool loadBalancingMode:round-robin members:[map[serverAddresses:[10.129.10.13 10.129.10.14] servicePort:80 shareNodes:false]] monitors:[http]]]] class:ADC controls:map[archiveTimestamp:2024-03-27T18:53:53.070Z class:Controls userAgent:CIS/v2.16.0 K8S/v1.26.13+8f85140] id:urn:uuid:85626792-9ee7-46bb-8fc8-4ba708cfdc1d label:CIS Declaration remark:Auto-generated by CIS schemaVersion:3.24.0 updateMode:selective] results:[map[code:422 host:localhost message:declaration failed response:010713f9:3: The folder /AS3-OpenShift-ocp-behoi-01/http-router cannot be deleted because it contains configuration item (folder /AS3-OpenShift-ocp-behoi-01/http-router/Drafts) runTime:9875 tenant:AS3-OpenShift-ocp-behoi-01]]]

When I look inside the F5 console I don't see anything for the http-router. We did a AS3 test using .json file before before started with the controller (see attached file). Before we started with the controller, we cleaned all via the console.

How can I get rid of the failing configuration?

F5-prod.json

trinaths commented 6 months ago

@wheestermans31 Please delete old config if any

message:declaration failed response:010713f9:3: The folder /AS3-OpenShift-ocp-behoi-01/http-router cannot be deleted because it contains configuration item (folder /AS3-OpenShift-ocp-behoi-01/http-router/Drafts) runTime:9875 tenant:AS3-OpenShift-ocp-behoi-01]]]

trinaths commented 6 months ago

@wheestermans31 Please share your findings with above recommendations.