Uploaded image for project: 'Migration Toolkit for Virtualization'
  1. Migration Toolkit for Virtualization
  2. MTV-720

Installing OpenShift MTV 2.5 after uninstalling 2.4 is failing with error "x509: certificate signed by unknown authority"

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Duplicate
    • Icon: Undefined Undefined
    • None
    • None
    • Operator
    • None
    • False
    • None
    • False
    • Moderate

      Description of problem:

      Followed Uninstalling MTV from the command line interface to uninstall the MTV 2.4:

       

      dell-per7525-03 ~]# oc delete project openshift-mtv
      project.project.openshift.io "openshift-mtv" deleted
      
      [root@dell-per7525-03 ~]# oc get crd -o name | grep 'forklift' | xargs oc delete
      customresourcedefinition.apiextensions.k8s.io "forkliftcontrollers.forklift.konveyor.io" deleted
      customresourcedefinition.apiextensions.k8s.io "hooks.forklift.konveyor.io" deleted
      customresourcedefinition.apiextensions.k8s.io "hosts.forklift.konveyor.io" deleted
      customresourcedefinition.apiextensions.k8s.io "migrations.forklift.konveyor.io" deleted
      customresourcedefinition.apiextensions.k8s.io "networkmaps.forklift.konveyor.io" deleted
      customresourcedefinition.apiextensions.k8s.io "openstackvolumepopulators.forklift.konveyor.io" deleted
      customresourcedefinition.apiextensions.k8s.io "ovirtvolumepopulators.forklift.konveyor.io" deleted
      customresourcedefinition.apiextensions.k8s.io "plans.forklift.konveyor.io" deleted
      customresourcedefinition.apiextensions.k8s.io "providers.forklift.konveyor.io" deleted
      customresourcedefinition.apiextensions.k8s.io "storagemaps.forklift.konveyor.io" deleted
       
      [root@dell-per7525-03 ~]# oc delete oauthclient/forklift-ui 
      Error from server (NotFound): oauthclients.oauth.openshift.io "forklift-ui" not found
      

       

      This is not deleting forklift-api ValidatingWebhookConfiguration and MutatingWebhookConfiguration:

       

       

      dell-per7525-03 ~]# oc get MutatingWebhookConfiguration |grep -i fork
      forklift-api                                                          2          111d
      dell-per7525-03 ~]#oc get ValidatingWebhookConfiguration |grep -i fork
      forklift-api                                                                             3          111d
       
      

      Installing back MTV 2.5  is failing with the error below:

       TASK [Setup default provider] ********************************
      fatal: [localhost]: FAILED! => {"changed": false, "error": 500, "msg": "Failed to create object: b'{\"kind\":\"Status\",\"apiVersion\":\"v1\",\"metadata\":{},\"status\":\"Failure\",\"message\":\"Internal error occurred: failed calling webhook \\\\\"providers.forklift.konveyor\\\\\": failed to call webhook: Post \\\\\"https://forklift-api.openshift-mtv.svc:443/provider-validate?timeout=10s\\\\\": x509: certificate signed by unknown authority\",\"reason\":\"InternalError\",\"details\":{\"causes\":[{\"message\":\"failed calling webhook \\\\\"providers.forklift.konveyor\\\\\": failed to call webhook: Post \\\\\"https://forklift-api.openshift-mtv.svc:443/provider-validate?timeout=10s\\\\\": x509: certificate signed by unknown authority\"}]},\"code\":500}\\n'", "reason": "Internal Server Error", "status": 500}

      The forklift-controller will fail to start and events have the below message : 

       

      80s         Warning   FailedMount           pod/forklift-controller-7d9ccd7b7b-x7pzv                     MountVolume.SetUp failed for volume "forklift-validation-serving-cert" : secret "forklift-validation-serving-cert" not found
      3m28s       Normal    SuccessfulCreate      replicaset/forklift-controller-7d9ccd7b7b                    Created pod: forklift-controller-7d9ccd7b7b-x7pzv
      85s         Warning   FailedMount           pod/forklift-controller-7d9ccd7b7b-x7pzv                     Unable to attach or mount volumes: unmounted volumes=[forklift-validation-serving-cert], unattached volumes=[forklift-validation-serving-cert cert profiler kube-api-access-d56cg inventory forklift-inventory-serving-cert]: timed out waiting for the condition

      Need to manually delete the webhooks forklift-api for the installation to continue.

      Version-Release number of selected component (if applicable):

      mtv-operator.v2.5.0

      How reproducible:

      100 %

      Steps to Reproduce:
      1. Uninstall MTV 2.4 by following the doc.
      2. Install MTV 2.5. The deployment will fail. 
      3.

      Actual results:

      Installing OpenShift MTV 2.5 after uninstalling 2.4 is failing with error "x509: certificate signed by unknown authority".

      Expected results:

      Either doc should have steps to delete both the webhooks or the uninstallation should automatically handle this.

      Additional info:

              Unassigned Unassigned
              rhn-support-nashok Nijin Ashok
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated:
                Resolved: