Details
-
Bug
-
Resolution: Unresolved
-
Normal
-
None
-
4.13
-
None
-
No
-
False
-
Description
Description of problem:
After initial deletion of the authentication resources, it takes longer time (more than 10~15 minutes) for them to come back to normal state.
How reproducible:
Sometimes on the profiles:
- Disconnected UPI on Baremetal with RHEL8.5 & OVN IPSEC
- 02_UPI_on_Baremetal-packet_OVN-dual-stack_Disk-encryption_Disk-mirroring_Etcd-encryption
- 16_UPI on Azure& OVN
Always on SNO env
Steps to Reproduce:
1. oc delete authentication.operator cluster
2. oc delete project openshift-authentication-operator
Actual results:
$ oc get authentication.operator
No resources found
$ oc get project openshift-authentication-operator
Error from server (NotFound): namespaces "openshift-authentication-operator" not found
Above behavior is seen for about 10~15 minutes for the 1st time deletion.
Deleted auth resources will come back immediately on 2nd, 3rd deletion.
Expected results:
Deleted authentication resources can come back immediately
Additional info:
Root cause On SNO cluster could be: it has only 1 kube-apiserver pod replica, its rotation can cause the cluster to be unavailable for a longer time. So kube-apiserver rotation can lead to the error:
The connection to the server api.test11-sno.qe.devcluster.openshift.com:6443 was refused - did you specify the right host or port.
Ref: https://polarion.engineering.redhat.com/polarion/#/project/OSE/workitem?id=OCP-29917