Azure CVO becomes inaccessible after root storage account keys rotation from Azure portal
Applies to
- NetApp Console
- Cloud Volumes ONTAP (CVO)
- Microsoft Azure
Issue
- After rotating the access keys for the root storage account directly from the Azure portal, the CVO cluster becomes inaccessible. ONTAP is stuck in a boot loop and below errors are seen on the serial console of both CVO VM's in Azure :
[xxxxxxxx:osc.signatureMismatch:error]: Object-store LIST operation server-calculated request signature does not match the signature sent to object-store server xxxxxxxxx.blob.core.windows.net for bucket or container "xxxxxxxx" on node xxxxxxxxxxxxxxxxxxxxxxxx. Check the keys and signing method.[xxxxxxxx:pha.obj.scanFailure:error]: ONTAP could not get a list of objects from the object store, "xxxxxxxx", at "xxxxxxxxx.blob.core.windows.net", using IP address "xxx.xxx.xx.xxx" with error: Server failed to authenticate the request.[xxxxxxxx:config.noPartnerDisks:error]: No disks were detected for the partner; this node cannot perform takeover correctly. - The CVO cluster is in a failed state in NetApp Console.
