bosh-linux-stemcell-builder icon indicating copy to clipboard operation
bosh-linux-stemcell-builder copied to clipboard

AWS stemcell is missing from cn-north-1 region since v1.423

Open garyliu-philips opened this issue 1 year ago • 4 comments

Hi team,

I want to report the Stemcell AMI for cn-north-1 is missing from the stemcell.MF lightweight package in the v1.423 release. We also couldn't find the AMI associated with v1.406 available in AWS China.

cn-north-1: ami-0c9ed81eab6e91191

Can you please confirm if there is any change of region scope which removes cn-north-1 region going forward? Or this is just an operational issue?

Cheers, Gary

garyliu-philips avatar Apr 16 '24 07:04 garyliu-philips

This was announced in the bosh Slack channel. Form the channel (link):

Hi all. We’ve run into yet another problem where our AWS China accounts have been deactivated and we’re not having any luck regaining access to them. We don’t believe we’re going to get access to them, which means in some shortish amount of time, all the AWS China light stemcell AMIs will fail to work. We also will be unable to publish new light stemcells into the AWS China region. If you deploy things into this region, you’ll need to use the heavy stemcell.

beyhan avatar Apr 16 '24 12:04 beyhan

@christopherclark is this something the LF help with this?

rkoster avatar Apr 18 '24 15:04 rkoster

because https://github.com/cloudfoundry/bosh-aws-cpi-release/issues/134 prevents the usage of a heavy stemcell we are currently stuck here with bosh create-env in cn-north-1

jsievers avatar Jul 05 '24 13:07 jsievers

Work around would be to spin up a bootstrap VM in cn-north-1 manually and then run the create-env from that VM so it's able to create/attach an EBS volume to the VM and create the AMI from the heavy image.

jpalermo avatar Jul 11 '24 15:07 jpalermo

Hi all, apologies for the lengthy delay on this. Questions from LF IT:

"Does this need to be in mainland China? Does this need to be AWS, or will other cloud providers work (like Alibaba) If this has to be in China, this will require an ICP license, tied to the project. We haven't done one of these in quite a while, maybe 2018/2019 for the last one."

I believe we'd need to get an ICP license. If so, it's not a trivial ask and has some expense attached to it, as the CFF would need to create a business unit in China. However, it's possible. Let me know if this is essential, or if we're wrong about the complexities here. Happy to jump on a call to discuss.

christopherclark avatar Aug 28 '24 15:08 christopherclark

Alibaba won’t work, in the past we relied on the ICP license from Pivotal, which has expired, preventing us from publishing AWS AMI’s to the China region.

On 28 Aug 2024, at 17:22, Chris Clark @.***> wrote:

Hi all, apologies for the lengthy delay on this. Questions from LF IT:

"Does this need to be in mainland China? Does this need to be AWS, or will other cloud providers work (like Alibaba) If this has to be in China, this will require an ICP license, tied to the project. We haven't done one of these in quite a while, maybe 2018/2019 for the last one."

I believe we'd need to get an ICP license. If so, it's not a trivial ask and has some expense attached to it, as the CFF would need to create a business unit in China. However, it's possible. Let me know if this is essential, or if we're wrong about the complexities here. Happy to jump on a call to discuss.

— Reply to this email directly, view it on GitHub https://github.com/cloudfoundry/bosh-linux-stemcell-builder/issues/340#issuecomment-2315661544, or unsubscribe https://github.com/notifications/unsubscribe-auth/AAC46GN6SBQ5LAHEEQA3UVDZTXTK7AVCNFSM6AAAAABGIYA7J2VHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDGMJVGY3DCNJUGQ. You are receiving this because you commented.

-- This electronic communication and the information and any files transmitted with it, or attached to it, are confidential and are intended solely for the use of the individual or entity to whom it is addressed and may contain information that is confidential, legally privileged, protected by privacy laws, or otherwise restricted from disclosure to anyone else. If you are not the intended recipient or the person responsible for delivering the e-mail to the intended recipient, you are hereby notified that any use, copying, distributing, dissemination, forwarding, printing, or copying of this e-mail is strictly prohibited. If you received this e-mail in error, please return the e-mail to the sender, delete it from your computer, and destroy any printed copy of it.

rkoster avatar Aug 28 '24 16:08 rkoster

We discussed this in the TOC meeting and we don't see high demand at the moment to offer a light stemcell in China. That is why we don't plan for this for now because it is not a trivial task and has some expense attached. Also, there is a workaround described in https://github.com/cloudfoundry/bosh-aws-cpi-release/issues/134. @garyliu-philips Have you found a workaround for you?

beyhan avatar Sep 10 '24 15:09 beyhan

@beyhan sorry for the late response. yes, we are using the https://github.com/cloudfoundry/bosh-aws-light-stemcell-builder and the heavy stemcell to create the AMI manually and update the light stemcell package. it takes some time to prepare it for the cf deployment but it works.

garyliu-philips avatar Sep 23 '24 06:09 garyliu-philips

Closing with the statement that we don't plan to provide a light stemcell in China for the moment because of https://github.com/cloudfoundry/bosh-linux-stemcell-builder/issues/340#issuecomment-2341269705.

beyhan avatar Sep 23 '24 08:09 beyhan