-
Bug
-
Resolution: Done
-
Critical
-
MCE 2.3.0
-
None
-
False
-
None
-
False
-
-
-
-
-
No
Description of problem:
MCE installation is stuck in progressing state due to the failing local-cluster import
MCE operator shows:
~~~
- kind: local-cluster
lastTransitionTime: "2023-09-06T08:55:26Z"
message: Registration agent stopped updating its lease.
name: local-cluster
reason: ManagedClusterLeaseUpdateStopped
status: Unknown
type: ManagedClusterConditionAvailable
~~~
The import cluster controller pod shows the below logs:
~~~
2023-09-06T08:33:14.873261836Z 2023-09-06T08:33:14.873137499Z INFO importconfig-controller Reconciling managed cluster import secret
2023-09-06T08:33:14.916349465Z 2023-09-06T08:33:14.916190199Z ERROR Reconciler error {"controller": "importconfig-controller", "object":
{"name":"local-cluster"}, "namespace": "", "name": "local-cluster", "reconcileID": "347eb8ed-30f5-4520-8e74-0103fc3ae7f6", "error": "tls: failed to verify certificate: x509: certificate signed by unknown authority"}
2023-09-06T08:33:14.916349465Z sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler
2023-09-06T08:33:14.916349465Z /remote-source/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.14.4/pkg/internal/controller/controller.go:329
2023-09-06T08:33:14.916349465Z sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem
2023-09-06T08:33:14.916349465Z /remote-source/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.14.4/pkg/internal/controller/controller.go:274
2023-09-06T08:33:14.916349465Z sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2
2023-09-06T08:33:14.916349465Z /remote-source/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.14.4/pkg/internal/controller/controller.go:235
2023-09-06T08:33:17.370054188Z 2023-09-06T08:33:17.36991248Z INFO selfmanagedcluster-controller Reconciling self managed cluster
2023-09-06T08:33:17.370054188Z 2023-09-06T08:33:17.369997774Z INFO selfmanagedcluster-controller Waiting for klusterlet manifest works for managed cluster local-cluster
{"Request.Name": "local-cluster"}~~~
Version-Release number of selected component (if applicable): 2.8
Actual results:
MCE operator is stuck in progressing state.
Expected results:
MCE operator should be successfully installed.
Additional info:
- The underlying ocp cluster is deployed on Baremetal
- The must-gather shows that no local-cluster* import secrets have been created under the local-cluster namespace either:
~~~
% less namespaces/local-cluster/core/secrets.yaml | grep " name: " | grep local-cluster
name: local-cluster-bootstrap-sa-dockercfg-86r5b
name: local-cluster-bootstrap-sa-token-cl99b
name: local-cluster-bootstrap-sa-token-cl99b
~~~