Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

engine-storage: Set SecretConsumerDetail for VM live migration with storage on shared NFS #9222

Merged
merged 8 commits into from
Nov 7, 2024

Conversation

abh1sar
Copy link
Collaborator

@abh1sar abh1sar commented Jun 11, 2024

Description

Fixes #8255

This PR Fixes the issue where live migration of a VM with encrypted volume on shared NFS due to wrongly setup secret key on the destination.
Before fix uuid of the secret key was corresponding to the source volume, while actually it should be of the destination volume.

Types of changes

  • Breaking change (fix or feature that would cause existing functionality to change)
  • New feature (non-breaking change which adds functionality)
  • Bug fix (non-breaking change which fixes an issue)
  • Enhancement (improves an existing feature and functionality)
  • Cleanup (Code refactoring and cleanup, that may add test cases)
  • build/CI

Feature/Enhancement Scale or Bug Severity

Feature/Enhancement Scale

  • Major
  • Minor

Bug Severity

  • BLOCKER
  • Critical
  • Major
  • Minor
  • Trivial

Screenshots (if appropriate):

How Has This Been Tested?

Reproduced the original issue by

  1. Create a VM with encrypted data volume
  2. Open the Live VM migrate UI wizard
  3. Select Migrate with Storage option and made sure that the data volume is moved to a different pool.
  4. Start live migrate.

How did you try to break this feature and the system with this change?

@abh1sar abh1sar requested a review from mlsorensen June 11, 2024 14:06
@abh1sar abh1sar added this to the 4.19.1.0 milestone Jun 11, 2024
@abh1sar abh1sar self-assigned this Jun 11, 2024
Copy link

codecov bot commented Jun 11, 2024

Codecov Report

Attention: Patch coverage is 0% with 3 lines in your changes missing coverage. Please review.

Project coverage is 15.08%. Comparing base (3f5a77e) to head (487b788).
Report is 42 commits behind head on 4.19.

Files with missing lines Patch % Lines
...torage/motion/StorageSystemDataMotionStrategy.java 0.00% 1 Missing and 2 partials ⚠️
Additional details and impacted files
@@             Coverage Diff              @@
##               4.19    #9222      +/-   ##
============================================
- Coverage     15.08%   15.08%   -0.01%     
+ Complexity    11190    11188       -2     
============================================
  Files          5406     5406              
  Lines        473210   473211       +1     
  Branches      61188    59224    -1964     
============================================
  Hits          71376    71376              
- Misses       393887   393888       +1     
  Partials       7947     7947              
Flag Coverage Δ
uitests 4.30% <ø> (ø)
unittests 15.80% <0.00%> (-0.01%) ⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

Copy link
Member

@weizhouapache weizhouapache left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

code lgtm

@weizhouapache
Copy link
Member

@abh1sar
just a suggestion, you can create a new branch (instread of 4.19)

@abh1sar
Copy link
Collaborator Author

abh1sar commented Jun 12, 2024

Removed a condition which was not allowing live migrate for powerflex as @harikrishna-patnala suggested on issue #8255

Copy link
Contributor

@harikrishna-patnala harikrishna-patnala left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

code LGTM. This needs testing with powerflex storage as well.

@abh1sar
Copy link
Collaborator Author

abh1sar commented Jun 12, 2024

@blueorangutan package

@blueorangutan
Copy link

@abh1sar a [SL] Jenkins job has been kicked to build packages. It will be bundled with KVM, XenServer and VMware SystemVM templates. I'll keep you posted as I make progress.

@blueorangutan
Copy link

Packaging result [SF]: ✔️ el7 ✔️ el8 ✔️ el9 ✔️ debian ✔️ suse15. SL-JID 9879

Copy link
Member

@rohityadavcloud rohityadavcloud left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM didn't test it though

@abh1sar
Copy link
Collaborator Author

abh1sar commented Jun 12, 2024

@blueorangutan test

@blueorangutan
Copy link

@abh1sar a [SL] Trillian-Jenkins test job (centos7 mgmt + kvm-centos7) has been kicked to run smoke tests

@blueorangutan
Copy link

[SF] Trillian test result (tid-10427)
Environment: kvm-centos7 (x2), Advanced Networking with Mgmt server 7
Total time taken: 43872 seconds
Marvin logs: https://github.com/blueorangutan/acs-prs/releases/download/trillian/pr9222-t10427-kvm-centos7.zip
Smoke tests completed. 131 look OK, 0 have errors, 0 did not run
Only failed and skipped tests results shown below:

Test Result Time (s) Test File

@abh1sar
Copy link
Collaborator Author

abh1sar commented Jun 26, 2024

@blueorangutan package

@blueorangutan
Copy link

@abh1sar a [SL] Jenkins job has been kicked to build packages. It will be bundled with KVM, XenServer and VMware SystemVM templates. I'll keep you posted as I make progress.

@blueorangutan
Copy link

Packaging result [SF]: ✔️ el7 ✔️ el8 ✔️ el9 ✔️ debian ✔️ suse15. SL-JID 10133

@abh1sar
Copy link
Collaborator Author

abh1sar commented Jun 28, 2024

@borisstoyanov I have merged with the latest changes and built packages. Can you please try once more.

@sureshanaparti sureshanaparti modified the milestones: 4.19.1.0, 4.19.2.0 Jun 28, 2024
@abh1sar abh1sar deleted the branch apache:4.19 August 20, 2024 11:39
@abh1sar abh1sar closed this Aug 20, 2024
@abh1sar abh1sar deleted the 4.19 branch August 20, 2024 11:39
@abh1sar abh1sar restored the 4.19 branch August 20, 2024 12:51
@abh1sar abh1sar reopened this Aug 20, 2024
@abh1sar
Copy link
Collaborator Author

abh1sar commented Aug 21, 2024

@blueorangutan package

@blueorangutan
Copy link

@abh1sar a [SL] Jenkins job has been kicked to build packages. It will be bundled with KVM, XenServer and VMware SystemVM templates. I'll keep you posted as I make progress.

@blueorangutan
Copy link

Packaging result [SF]: ✔️ el8 ✔️ el9 ✔️ debian ✔️ suse15. SL-JID 10729

@vladimirpetrov vladimirpetrov self-assigned this Aug 22, 2024
Copy link
Contributor

@vladimirpetrov vladimirpetrov left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM based on manual testing. Tested with Oracle Linux 8 KVM using the provided steps.

@DaanHoogland
Copy link
Contributor

@borisstoyanov @sureshanaparti are your concerns met?

@abh1sar
Copy link
Collaborator Author

abh1sar commented Aug 23, 2024

@blueorangutan test

@blueorangutan
Copy link

@abh1sar a [SL] Trillian-Jenkins test job (ol8 mgmt + kvm-ol8) has been kicked to run smoke tests

Copy link
Contributor

@borisstoyanov borisstoyanov left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGMT, based on code review, marvin tests

@blueorangutan
Copy link

[SF] Trillian test result (tid-11150)
Environment: kvm-ol8 (x2), Advanced Networking with Mgmt server ol8
Total time taken: 46545 seconds
Marvin logs: https://github.com/blueorangutan/acs-prs/releases/download/trillian/pr9222-t11150-kvm-ol8.zip
Smoke tests completed. 132 look OK, 1 have errors, 0 did not run
Only failed and skipped tests results shown below:

Test Result Time (s) Test File
test_03_secured_to_nonsecured_vm_migration Error 397.15 test_vm_life_cycle.py

@sureshanaparti
Copy link
Contributor

@borisstoyanov @sureshanaparti are your concerns met?

not yet, will confirm the powerflex check with the author.

@sureshanaparti
Copy link
Contributor

sureshanaparti commented Aug 29, 2024

@vladimirpetrov this needs testing with powerflex as well.

@rohityadavcloud
Copy link
Member

rohityadavcloud commented Sep 19, 2024

cc @kiranchavala @vladimirpetrov

@rohityadavcloud rohityadavcloud merged commit 22c6f08 into apache:4.19 Nov 7, 2024
25 of 26 checks passed
@abh1sar abh1sar deleted the 4.19 branch November 8, 2024 01:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
Development

Successfully merging this pull request may close these issues.

live migration of encrypted volume fails with nfs
10 participants