For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Vinne73's avatar
Vinne73
Icon for Cirrus rankCirrus
Jul 07, 2016

Components list of a deployed iApp is incorrect and way too short

Hi,

 

I have created my own, not complex iApp templates. Sometimes I deploy an application, then turn of Strict Updates to make some tweeks and/or debug a specific VS.

 

The problem: after a while, objects get orphaned. E.g. the pool still exists, but is no longer connected to my application. Same for profiles etc.

 

Now when I redeploy this specific application, or when I just go to components: the list becomes ever shorter.

 

After a while I can't redeploy my application, because I get all sorts of warnings/errors that objects are in use. Of course they are, by the application itself, my bigip just forgets that these objects are part of the app.

 

Has anyone experienced this problem and/or found a fix?

 

Seems like a bug to be honest, I'm not doing anything funky.

 

Thanks VIncent

 

application delivery
iApps

3 Replies

  • Vinne73's avatar
    Vinne73
    Icon for Cirrus rankCirrus
    Jul 07, 2016

    I did some more searching, turns out that in the config file, the following line is missing for the ltm virtual server:

     

    app-service /XXXXX

     

    So somewhere when doing manual changes on a VS, this line isn't saved and as a result the VS is no longer part of the iApp. Still think it's a bug :)

     

    • Fred_Slater_856's avatar
      Fred_Slater_856
      Historic F5 Account
      Jul 07, 2016
      Turning off strict-updates quickly makes a mess of things. This article may help you to understand the consequences: https://devcentral.f5.com/s/articles/understanding-iapps-18224. That said, if you are sophistocated enough to do that kind of work, then you can add the app-service tag to almost any LTM object to include it in the component view. As noted in the article, mark & sweep will delete that object if you re-run the iApp, so be aware of what you are doing.
    • Vinne73's avatar
      Vinne73
      Icon for Cirrus rankCirrus
      Jul 08, 2016

      Thanks, I read the article, and it seems that I shouldn't disable Strict Updates so much. It's never my plan, till the app managers want exceptions for one specific VS :)

       

      If I understand correctly, reconfiguring an iApp is like performing a live upgrade. Things that stay the same just stay that way, the VS stays live etc.

       

      Now... is there a way (a tmsh command perhaps) that performs a delete of all iApp generated config, and regenerates? Service interruptions are not a problem. So the same effect as deleting an iApp and associated config, and creating a new one with the same inputs.

       

      I know a tmsh command that reconfigures an iApp, but as is said in your article, it isn't garantueed that all "bad"/manually changed settings are reset/overwritten. So to be absolutely sure that all settings are now as they should be, from a virgin deployment, for a messy iApp that had Strict Updates disabled?