LI83127: AFTER DR DB-0 POD IS NOT COMING UP

APAR status

• Closed as program error.

Error description

• In the db-o pod logs will have entry:
  
  ERROR 1396 (HY000) at line 2: Operation CREATE USER failed for
  'root'@'%'
  ===============================================================
  ========================================
  ERROR occurred in script start_db.sh at line: 259.
  run_db: GVOTE: Voting started on
  300c3126-bfc3-11ee-aad1-3ad3307c95f0:5
    at main(/opt/ibm/bin/start_db.sh:259)
  PATH=/opt/ibm/bin:/sbin:/opt/ibm/services/portal/client:/opt/ib
  m/bin:/sbin:/opt/ibm/services/portal/client:/usr/share/Modules/
  bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
  ===============================================================
  ========================================
  

Local fix

• The fix for this issue is to regenerate the portal encryption
  key. If you are seeing the error from portal-www within
  sysupgrade, then complete the following:
  
  Disable sysupgrade on portal-www-0 by renaming it:
  kubectl -n  exec -it  -c admin -- bash
  mv /opt/ibm/bin/sysupgrade /opt/ibm/bin/sysupgrade.bak
  exit
  
  Regenerate the portal encryption key
  kubectl -n  patch secret  -p
  "{\"data\": {\"encryption_secret\":\"$(head -c72 /dev/urandom |
  base64 -w0 | base64 -w0)\"}}"
  
  
  Wait for the key to be rotated within the portal-www pods. You
  can follow the portal-www-0 admin logs until you no longer see
  logs about rotation.
  Re-enable sysupgrade:
  mv /opt/ibm/bin/sysupgrade.bak /opt/ibm/bin/sysupgrade
  

Problem summary

• An encryption key migrated from v2018 would be invalid in
  v10.0.5.3 and above.
  

Problem conclusion

• Fixed in 10.0.5.7 and 10.0.8. The code will throw a descriptive
  error and ask the user to regenerate the encryption key.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  API CONNECT ENT

• Fixed component ID

  5725Z2201

Applicable component levels