-
Bug
-
Resolution: Done-Errata
-
Minor
-
None
-
False
-
-
False
-
CLOSED
-
---
-
---
-
-
CNV Infra 243, CNV Infra Next
-
Medium
-
No
Description of problem:
ssp pod continue to be in CrashLoopBackOff for nearly ~5 mins when tlssecurityProfile is changed often.
1. Set HCO tlsSecurityProfile as old.
oc get hco kubevirt-hyperconverged -n openshift-cnv -ojsonpath=
{.spec.tlsSecurityProfile}{"old":{},"type":"Old"}
2. Set ssp tlssecurityProfile explicitly to custom.
oc patch ssp -n openshift-cnv --type=json ssp-kubevirt-hyperconverged -p '[{"op": "replace", "path": /spec/tlsSecurityProfile, "value": {custom: {minTLSVersion: "VersionTLS13", ciphers: ["TLS_AES_128_GCM_SHA256", "TLS_CHACHA20_POLY1305_SHA256"]}, type: "Custom"} }]'
3. Expected is HCO should try to propogate it's tls settings to ssp.
$ oc get ssp ssp-kubevirt-hyperconverged -n openshift-cnv -ojsonpath={.spec.tlsSecurityProfile}
{"old":{},"type":"Old"}
However during this whole procedure, ssp(ssp-operator-79bbc48bc5-tch2n) pod continue to be in CrashLoopBackOff for nearly ~5 mins.
oc get pods -A -w | grep -i ssp
openshift-cnv ssp-operator-79bbc48bc5-tch2n 0/1 CrashLoopBackOff 10 (4m54s ago) 28h
Version-Release number of selected component (if applicable):
4.12
How reproducible:
always
Steps to Reproduce:
1.mentioned above
2.
3.
Actual results:
ssp pods goes to crashed state and sometimes it is too often and for longer time.
Expected results:
ssp pods should not be crashed often and wait time should be less
Additional info: