Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-23921

CCM uses MC's KAS instead of HC's KAS

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done-Errata
    • Icon: Normal Normal
    • 4.15.0
    • 4.15.0
    • HyperShift
    • None
    • No
    • False
    • Hide

      None

      Show
      None
    • Hide
      Cause:
      Consequence: Cloud Controller Manager relies on management KAS access although it doesn't need it
      Fix: Switched to using guest kubeconfig
      Result: Cloud Controller Manager doesnt need management KAS access
      Show
      Cause: Consequence: Cloud Controller Manager relies on management KAS access although it doesn't need it Fix: Switched to using guest kubeconfig Result: Cloud Controller Manager doesnt need management KAS access
    • Bug Fix
    • In Progress

      Description of problem:

          The way CCM is deployed, it gets the kubeconfig configuration from the environment it runs on, which is the Management cluster. Thus, it communicates with the Kubernetes Api Server (KAS) of the Management Cluster (MC) instead of the KAS of the Hosted Cluster it is part of.

      Version-Release number of selected component (if applicable):

          4.15.0

      How reproducible:

          100%

      Steps to Reproduce:

          1. Deploy a hosted cluster
    2. oc debug to the node running the HC CCM
    3. crictl ps -a to list all the containers
    4. crictl inspect X  # Where X is the container id of the CCM container
    5. nsenter -n -t pid_of_ccm_container
    6. tcpdump

      Actual results:

          Communication goes to MC KAS

      Expected results:

          Communication goes to HC KAS

      Additional info:

            pstefans@redhat.com Patryk Stefanski
            asegurap1@redhat.com Antoni Segura Puimedon
            Jie Zhao Jie Zhao
            Votes:
            0 Vote for this issue
            Watchers:
            6 Start watching this issue

              Created:
              Updated:
              Resolved: