-
Task
-
Resolution: Done
-
Normal
-
MCE 2.9.0
-
3
-
False
-
-
False
-
-
-
Workload Mgmt Train 29 - 1, Workload Mgmt Train 29 - 2
-
Critical
-
None
Description of problem:
When CAPI/CAPA is enabled in MCE, AWS hosted cluster cluster gets stuck during deployment.
The validation webhooks in CAPI/CAPA cause issues with the hypershift operator
{"level":"error","ts":"2025-06-19T14:18:44Z","msg":"Failed to reconcile NodePool","controller":"nodepool","controllerGroup":"hypershift.openshift.io","controllerKind":"NodePool","NodePool":{"name":"acmqe-hc-32a95cbb9b194d81-us-east-1a","namespace":"clusters"},"namespace":"clusters","name":"acmqe-hc-32a95cbb9b194d81-us-east-1a","reconcileID":"fcfe593f-dcd1-4f90-afdd-9a5161bb72cc","error":"admission webhook \"validation.awsmachinetemplate.infrastructure.cluster.x-k8s.io\" denied the request: AWSMachineTemplate.infrastructure.cluster.x-k8s.io \"acmqe-hc-32a95cbb9b194d81-us-east-1a-c6a50e4e\" is invalid: spec.template.spec.cloudInit.secureSecretsBackend: Forbidden: cannot be set if spec.template.spec.cloudInit.insecureSkipSecretsManager is true","stacktrace":"github.com/openshift/hypershift/hypershift-operator/controllers/nodepool.(*NodePoolReconciler).Reconcile\n\t/hypershift/hypershift-operator/controllers/nodepool/nodepool_controller.go:213\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Reconcile\n\t/hypershift/vendor/sigs.k8s.io/controller-runtime/pkg/internal/controller/controller.go:116\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/hypershift/vendor/sigs.k8s.io/controller-runtime/pkg/internal/controller/controller.go:303\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/hypershift/vendor/sigs.k8s.io/controller-runtime/pkg/internal/controller/controller.go:263\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.2\n\t/hypershift/vendor/sigs.k8s.io/controller-runtime/pkg/internal/controller/controller.go:224"}
Version-Release number of selected component (if applicable):
ACM 2.14.0-DOWNSTREAM-2025-06-18-15-21-33 / MCE 2.9.0-DOWNSTREAM-2025-06-18-15-21-40
How reproducible:
always
Steps to Reproduce:
- enable capi/capa on MCE/ACM
- attempt to deploy a hosted cluster
- observe cluster is stuck
Actual results:
Expected results:
Additional info:
- relates to
-
OCPBUGS-57978 CAPA validating webhook breaks the hypershift operator
-
- New
-
-
ACM-21802 MCE component dependencies and relationships check
-
- New
-
