Uploaded image for project: 'OpenShift Virtualization'
  1. OpenShift Virtualization
  2. CNV-23186

[2151248] SSP pods moving to CrashLoopBackOff state for long duration when tlssecurityProfile is changed often

XMLWordPrintable

    • CNV Infra 243, CNV Infra Next
    • Medium
    • No

      Description of problem:

      ssp pod continue to be in CrashLoopBackOff for nearly ~5 mins when tlssecurityProfile is changed often.

      1. Set HCO tlsSecurityProfile as old.

      oc get hco kubevirt-hyperconverged -n openshift-cnv -ojsonpath=

      {.spec.tlsSecurityProfile}
      {"old":{},"type":"Old"}

      2. Set ssp tlssecurityProfile explicitly to custom.

      oc patch ssp -n openshift-cnv --type=json ssp-kubevirt-hyperconverged -p '[{"op": "replace", "path": /spec/tlsSecurityProfile, "value": {custom: {minTLSVersion: "VersionTLS13", ciphers: ["TLS_AES_128_GCM_SHA256", "TLS_CHACHA20_POLY1305_SHA256"]}, type: "Custom"} }]'

      3. Expected is HCO should try to propogate it's tls settings to ssp.

      $ oc get ssp ssp-kubevirt-hyperconverged -n openshift-cnv -ojsonpath={.spec.tlsSecurityProfile}

      {"old":{},"type":"Old"}

      However during this whole procedure, ssp(ssp-operator-79bbc48bc5-tch2n) pod continue to be in CrashLoopBackOff for nearly ~5 mins.

      oc get pods -A -w | grep -i ssp
      openshift-cnv ssp-operator-79bbc48bc5-tch2n 0/1 CrashLoopBackOff 10 (4m54s ago) 28h

      Version-Release number of selected component (if applicable):
      4.12

      How reproducible:

      always
      Steps to Reproduce:
      1.mentioned above
      2.
      3.

      Actual results:

      ssp pods goes to crashed state and sometimes it is too often and for longer time.

      Expected results:

      ssp pods should not be crashed often and wait time should be less
      Additional info:

              opokorny@redhat.com Ondrej Pokorny (Inactive)
              gkapoor@redhat.com Geetika Kapoor
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated:
                Resolved: