Pacemaker - Azure Fence Agent "fence_azure_arm" failed to start after Python 3.11 interpreter was installed

2024-07-24T11:15:25.550247+00:00 x00dhnp01l1f4 fence_azure_arm: Azure Resource Manager Python SDK not found or not accessible
2024-07-24T11:15:25.550389+00:00 x00dhnp01l1f4 fence_azure_arm: Please use '-h' for usage
2024-07-24T11:15:25.560338+00:00 x00dhnp01l1f4 pacemaker-fenced[8853]:  warning: fence_azure_arm[29901] stderr: [ 2024-07-24 11:15:25,549 ERROR: Azure Resource Manager Python SDK not found or not accessible ]
2024-07-24T11:15:25.560423+00:00 x00dhnp01l1f4 pacemaker-fenced[8853]:  warning: fence_azure_arm[29901] stderr: [  ]
2024-07-24T11:15:25.560474+00:00 x00dhnp01l1f4 pacemaker-fenced[8853]:  warning: fence_azure_arm[29901] stderr: [ 2024-07-24 11:15:25,549 ERROR: Please use '-h' for usage ]
2024-07-24T11:15:25.560504+00:00 x00dhnp01l1f4 pacemaker-fenced[8853]:  warning: fence_azure_arm[29901] stderr: [  ]

1. Install latest patches and reboot the instance
2. Verify the installed Python version
3. Install the fence-agents-azure-arm package.
4. Basic tests
5. Cleanup the Pacemaker cluster resource

Example:

1. Install latest patches if required execute this command twice and reboot the instance:

x00dhnp01l0f4:~ # zypper -n patch
x00dhnp01l0f4:~ # zypper -n patch
x00dhnp01l0f4:~ # reboot

2. Verify the installed Python version:

x00dhnp01l0f4:~ # python3 --version
Python 3.6.15
x00dhnp01l0f4:~ # python3.11 --version
Python 3.11.9

3. Install the required fence-agents-azure-arm package:

x00dhnp01l0f4:~ # zypper in fence-agents-azure-arm

4. Basic tests:

   Azure - managed identity (MSI)

x00dhnp01l0f4:~ # fence_azure_arm --msi --action=list --subscriptionId=<subid> --resourceGroup=<rgname>
DEV-WEEU-SAP01-X00-x00dhnp01l0f4,
DEV-WEEU-SAP01-X00-x00dhnp01l1f4,

x00dhnp01l0f4:~ # fence_azure_arm --msi --action=status --subscriptionId=<subid> --resourceGroup=<rgname> --plug=DEV-WEEU-SAP01-X00-x00dhnp01l0f4
Status: ON

   Azure - service principal (SPN)

x00dhnp01l0f4:~ # fence_azure_arm --action=list --subscriptionId=<subid> --resourceGroup=<rgname> --tenantId=<tenantid> --username=<username> --password=<password>
DEV-WEEU-SAP01-X00-x00dhnp01l0f4,
DEV-WEEU-SAP01-X00-x00dhnp01l1f4,

x00dhnp01l0f4:~ # fence_azure_arm --action=status --subscriptionId=<subid> --resourceGroup=<rgname> --tenantId=<tenantid> --username=<username> --password=<password> --plug=DEV-WEEU-SAP01-X00-x00dhnp01l0f4
Status: ON

5. Cleanup the cluster resource:

x00dhnp01l0f4:~ # crm resource cleanup rsc_st_azure

Important notes:

The updated fence-agents package does not include the specific Azure Fence Agent binary (/usr/sbin/fence_azure_arm) anymore.

For Microsoft Azure the new package fence-agents-azure-arm needs to be installed. 

The new fence-agents-azure-arm package needs the Public Cloud Module to be activated, this is needed to provide the required Python 3.11 dependencies.

For SUSE Linux Enterprise Server 15 SP4+ the fence-agents-azure-arm package is available after activating the SUSE Linux Enterprise High Availability Extension. 

SLE 12 SP5 related TID: https://www.suse.com/support/kb/doc/?id=000021532