-
Bug
-
Resolution: Done
-
Major
-
None
-
None
-
None
Sometimes (not always) IstioCSR CR object won't be proceeded after creation, its status remains empty and the underlying deployment won't be created.
Observations:
- the IstioCSR object `.status` is empty.
- the cert-manager-istio-csr deployment won't show-up for a long time
- in the operator log, it shows as below. Seems the object wasn't be detected correctly so the reconciling "skipped":
I1008 13:24:53.403180 1 controller.go:302] "Reconciling" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" IstioCSR="istio-system/default" namespace="istio-system" name="default" reconcileID="6bfa7336-ecf5-451e-9859-ebfa2b229691" I1008 13:24:53.403203 1 controller.go:255] "reconciling" logger="cert-manager-istio-csr-controller" request="istio-system/default" I1008 13:24:53.403261 1 controller.go:264] "istiocsr.openshift.operator.io object not found, skipping reconciliation" logger="cert-manager-istio-csr-controller" request="istio-system/default" I1008 13:24:53.403281 1 controller.go:331] "Reconcile successful" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" IstioCSR="istio-system/default" namespace="istio-system" name="default" reconcileID="6bfa7336-ecf5-451e-9859-ebfa2b229691"
- Tried to manually force delete the operator pod, then everything would be back to normal in seconds. (deployment created and ready, CR object has ready status)
Example logs
- presubmit CI job: https://prow.ci.openshift.org/view/gs/test-platform-results/pr-logs/pull/openshift_cert-manager-operator/323/pull-ci-openshift-cert-manager-operator-cert-manager-1.18-e2e-operator/1976267708123058176#1:build-log.txt%3A887
- operator controller log: https://gcsweb-ci.apps.ci.l2s4.p1.openshiftapps.com/gcs/test-platform-results/pr-logs/pull/openshift_cert-manager-operator/323/pull-ci-openshift-cert-manager-operator-cert-manager-1.18-e2e-operator/1976267708123058176/artifacts/e2e-operator/gather-extra/artifacts/pods/cert-manager-operator_cert-manager-operator-controller-manager-7976f98bdb-s5rxs_cert-manager-operator.log
- operator controller log (local reproduced) https://privatebin.corp.redhat.com/?07bc625a3967b91e#F72KDf6Q4WqTSnyHYVZGLsUxJ4X1dem1iu8TbB1uqSV7
- blocks
-
OCPSTRAT-1974 [GA] istio-csr integration for cert-manager
-
- In Progress
-
- links to