Uploaded image for project: 'AMQ Interconnect'
  1. AMQ Interconnect
  2. ENTMQIC-3330

AMQ Certificate Manager on OCP cannot renew certificates

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Won't Do
    • Icon: Major Major
    • None
    • None
    • Operator
    • None
    • False
    • None
    • False
      1. Create certificate object, set renewal period to 1h, renewBefore to 15m
      2. wait 15 minutes
      3. examine operator logs

      • For the AMQ Certificate Manager on OCP 4.8, renewal fails:

       

       

      E0715 13:56:38.010339       1 event.go:296] Could not construct reference to: '&v1alpha1.Certificate{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"renewtest", GenerateName:"", Namespace:"openshift-operators", SelfLink:"", UID:"3cce44aa-084d-489f-a101-a2403bbf6b3f", ResourceVersion:"1211025", Generation:3, CreationTimestamp:v1.Time{Time:time.Time{wall:0x0, ext:63793489233, loc:(*time.Location)(0x255e280)}}, DeletionTimestamp:(*v1.Time)(nil), DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Initializers:(*v1.Initializers)(nil), Finalizers:[]string(nil), ClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry{v1.ManagedFieldsEntry{Manager:"Mozilla", Operation:"Update", APIVersion:"certmanager.k8s.io/v1alpha1", Time:(*v1.Time)(0xc425628080), Fields:(*v1.Fields)(nil)}, v1.ManagedFieldsEntry{Manager:"jetstack-cert-manager", Operation:"Update", APIVersion:"certmanager.k8s.io/v1alpha1", Time:(*v1.Time)(0xc4256280a0), Fields:(*v1.Fields)(nil)}}}, Spec:v1alpha1.CertificateSpec{CommonName:"renewtest", Organization:[]string{"Example CA"}, Duration:(*v1.Duration)(0xc4222fec48), RenewBefore:(*v1.Duration)(0xc4222fec50), DNSNames:[]string{"example.com", "www.example.com"}, IPAddresses:[]string(nil), SecretName:"renewtest", IssuerRef:v1alpha1.ObjectReference{Name:"ca-issuer", Kind:"Issuer"}, IsCA:false, ACME:(*v1alpha1.ACMECertificateConfig)(nil), KeySize:0, KeyAlgorithm:""}, Status:v1alpha1.CertificateStatus{Conditions:[]v1alpha1.CertificateCondition{v1alpha1.CertificateCondition{Type:"Ready", Status:"True", LastTransitionTime:(*v1.Time)(0xc4256280e0), Reason:"Ready", Message:"Certificate is up to date and has not expired"}}, LastFailureTime:(*v1.Time)(nil), NotAfter:(*v1.Time)(0xc425628a00)}}' due to: 'selfLink was empty, can't make reference'. Will not report event: 'Warning' 'SaveCertError' 'Error saving TLS certificate: resourceVersion should not be set on objects to be created'
       
      

       

      Known upstream issue due to API compatibility:

       

      https://github.com/cert-manager/cert-manager/issues/3615

              ansmith@redhat.com Andrew Smith
              rhn-support-shiggs Stephen Higgs
              Votes:
              2 Vote for this issue
              Watchers:
              5 Start watching this issue

                Created:
                Updated:
                Resolved: