-
Bug
-
Resolution: Won't Do
-
Major
-
None
-
None
-
None
-
False
-
None
-
False
-
-
- Create certificate object, set renewal period to 1h, renewBefore to 15m
- wait 15 minutes
- examine operator logs
- For the AMQ Certificate Manager on OCP 4.8, renewal fails:
E0715 13:56:38.010339 1 event.go:296] Could not construct reference to: '&v1alpha1.Certificate{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"renewtest", GenerateName:"", Namespace:"openshift-operators", SelfLink:"", UID:"3cce44aa-084d-489f-a101-a2403bbf6b3f", ResourceVersion:"1211025", Generation:3, CreationTimestamp:v1.Time{Time:time.Time{wall:0x0, ext:63793489233, loc:(*time.Location)(0x255e280)}}, DeletionTimestamp:(*v1.Time)(nil), DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Initializers:(*v1.Initializers)(nil), Finalizers:[]string(nil), ClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry{v1.ManagedFieldsEntry{Manager:"Mozilla", Operation:"Update", APIVersion:"certmanager.k8s.io/v1alpha1", Time:(*v1.Time)(0xc425628080), Fields:(*v1.Fields)(nil)}, v1.ManagedFieldsEntry{Manager:"jetstack-cert-manager", Operation:"Update", APIVersion:"certmanager.k8s.io/v1alpha1", Time:(*v1.Time)(0xc4256280a0), Fields:(*v1.Fields)(nil)}}}, Spec:v1alpha1.CertificateSpec{CommonName:"renewtest", Organization:[]string{"Example CA"}, Duration:(*v1.Duration)(0xc4222fec48), RenewBefore:(*v1.Duration)(0xc4222fec50), DNSNames:[]string{"example.com", "www.example.com"}, IPAddresses:[]string(nil), SecretName:"renewtest", IssuerRef:v1alpha1.ObjectReference{Name:"ca-issuer", Kind:"Issuer"}, IsCA:false, ACME:(*v1alpha1.ACMECertificateConfig)(nil), KeySize:0, KeyAlgorithm:""}, Status:v1alpha1.CertificateStatus{Conditions:[]v1alpha1.CertificateCondition{v1alpha1.CertificateCondition{Type:"Ready", Status:"True", LastTransitionTime:(*v1.Time)(0xc4256280e0), Reason:"Ready", Message:"Certificate is up to date and has not expired"}}, LastFailureTime:(*v1.Time)(nil), NotAfter:(*v1.Time)(0xc425628a00)}}' due to: 'selfLink was empty, can't make reference'. Will not report event: 'Warning' 'SaveCertError' 'Error saving TLS certificate: resourceVersion should not be set on objects to be created'
Known upstream issue due to API compatibility: