-
Bug
-
Resolution: Won't Do
-
Critical
-
None
-
ACM 2.8.1
-
None
-
False
-
-
False
-
-
-
Important
-
No
Description of problem:
On a ACM FIPS-enabled AWS hub on OCP 4.11.45 (contains recent fips related CVE fixes), the hypershift add-on crashes while being installed, and then keeps spawning new pods which error out to keep trying:
$ oc get pods -n open-cluster-management-agent-addon NAME READY STATUS RESTARTS AGE application-manager-669fb7d78d-zxrf9 1/1 Running 226 (8m20s ago) 2d16h cert-policy-controller-79544bbb7c-t8nsf 1/1 Running 0 2d16h cluster-proxy-proxy-agent-8458d9d68c-lv7xb 2/2 Running 0 2d4h cluster-proxy-service-proxy-5c84c8445d-bw82h 1/1 Running 0 2d4h config-policy-controller-68d4db8c5-7s4cl 2/2 Running 0 2d16h governance-policy-framework-5889dd4dd7-nqhdf 1/2 Running 90 (23s ago) 2d16h hypershift-addon-agent-86659644cd-cg7dj 1/2 CrashLoopBackOff 590 (4m41s ago) 2d16h hypershift-install-job-22f9l-6gwpd 0/1 Error 0 14h hypershift-install-job-26vg4-9sbxl 0/1 Error 0 30h hypershift-install-job-28d4p-k5htj 0/1 Error 0 40h hypershift-install-job-2blvb-4j5gm 0/1 Error 0 39h hypershift-install-job-2bnqv-75lsz 0/1 Error 0 12h hypershift-install-job-2fn5p-hgt5z 0/1 Error 0 17h hypershift-install-job-2fr9m-dvlw9 0/1 Error 0 41h ... ... hypershift-install-job-wkpv5-zmg85 0/1 Error 0 39h hypershift-install-job-wkw97-dh7qm 0/1 Error 0 27h hypershift-install-job-wl8cp-vgrzh 0/1 Error 0 44h hypershift-install-job-wn8xl-2f8pj 0/1 Error 0 46h hypershift-install-job-wq9g4-rk26z 0/1 Error 0 45h hypershift-install-job-wrgp2-8bvkb 0/1 Error 0 4h43m hypershift-install-job-ws4b9-qhfbg 0/1 Error 0 38h hypershift-install-job-wxvc6-7qdp8 0/1 Error 0 26h hypershift-install-job-wztqz-kjn8f 0/1 Error 0 44h hypershift-install-job-x422r-fzvlz 0/1 Error 0 44h hypershift-install-job-x6kw5-hdf9l 0/1 Error 0 43h hypershift-install-job-x8bkq-fmjmv 0/1 Error 0 19h hypershift-install-job-x8vnw-pgrw5 0/1 Error 0 34h hypershift-install-job-xfjzp-zd47v 0/1 Error 0 24h hypershift-install-job-xkjwq-j6v9n 0/1 Error 0 33h hypershift-install-job-xks7f-lnfx7 0/1 Error 0 15h hypershift-install-job-xpmnk-8ws8h 0/1 Error 0 38h hypershift-install-job-xrjzr-2wkx2 0/1 Error 0 21h hypershift-install-job-xtb7m-wktpg 0/1 Error 0 30h hypershift-install-job-z22w9-9mcxz 0/1 Error 0 62m hypershift-install-job-z8b9k-r4frt 0/1 Error 0 13h hypershift-install-job-zf5dc-zhhtx 0/1 Error 0 28h hypershift-install-job-zg9lw-wzf6f 0/1 Error 0 28h hypershift-install-job-zgpc7-5wz2r 0/1 Error 0 34h hypershift-install-job-zgwng-9vmjk 0/1 Error 0 12h hypershift-install-job-zhjqx-m5q7q 0/1 Error 0 33h hypershift-install-job-znggd-cqc77 0/1 Error 0 29h hypershift-install-job-zp2ms-8c5xt 0/1 Error 0 12h hypershift-install-job-zpbhk-kljwk 0/1 Error 0 35h hypershift-install-job-zwhz2-82sck 0/1 Error 0 18h hypershift-install-job-zxnjh-25s92 0/1 Error 0 34h hypershift-install-job-zzxx4-srclp 0/1 Error 0 36h iam-policy-controller-86f6fd8b4c-pqftz 1/1 Running 0 2d16h klusterlet-addon-workmgr-57b4b89cdf-knlhz 1/1 Running 0 2d4h
hypershift-install-job log:
FIPS mode is enabled, but this binary is not compiled with FIPS compliant mode enabled
hypershift-addon log:
$oc logs hypershift-addon-agent-86659644cd-cg7dj -n open-cluster-management-agent-addon --since 5s
Defaulted container "kube-rbac-proxy" out of: kube-rbac-proxy, hypershift-addon-agent
2023/08/04 07:20:57 http: TLS handshake error from 10.128.2.198:46134: tls: client offered only unsupported versions: [303]
Version-Release number of selected component (if applicable):
ACM 2.8.1-FC4
How reproducible:
always
Steps to Reproduce:
- deploy or upgrade to ocp 4.11.45 with acm 2.8.1
- enable hypershift
- ...
Actual results:
Expected results:
Additional info:
- is documented by
-
ACM-6844 [Documentation] Indicate that disconnected and FIPS environments are not supported by Hypershift
-
- Closed
-
There are no Sub-Tasks for this issue.
