Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-10525

Deleted authentication resources are not coming back to normal state immediately

    XMLWordPrintable

Details

    • Bug
    • Resolution: Unresolved
    • Normal
    • None
    • 4.13
    • None
    • No
    • False
    • Hide

      None

      Show
      None

    Description

      Description of problem:
      After initial deletion of the authentication resources, it takes longer time (more than 10~15 minutes) for them to come back to normal state. 

      How reproducible:
      Sometimes on the profiles: 

      • Disconnected UPI on Baremetal with RHEL8.5 & OVN IPSEC
      • 02_UPI_on_Baremetal-packet_OVN-dual-stack_Disk-encryption_Disk-mirroring_Etcd-encryption
      • 16_UPI on Azure& OVN

      Always on SNO env

      Steps to Reproduce:
      1. oc delete authentication.operator cluster
      2. oc delete project openshift-authentication-operator

      Actual results:
      $ oc get authentication.operator
      No resources found

      $ oc get project openshift-authentication-operator
      Error from server (NotFound): namespaces "openshift-authentication-operator" not found

      Above behavior is seen for about 10~15 minutes for the 1st time deletion.
      Deleted auth resources will come back immediately on 2nd, 3rd deletion.

      Expected results:
      Deleted authentication resources can come back immediately

      Additional info:
      Root cause On SNO cluster could be: it has only 1 kube-apiserver pod replica, its rotation can cause the cluster to be unavailable for a longer time. So kube-apiserver rotation can lead to the error:

      The connection to the server api.test11-sno.qe.devcluster.openshift.com:6443 was refused - did you specify the right host or port.

      Ref: https://polarion.engineering.redhat.com/polarion/#/project/OSE/workitem?id=OCP-29917 

      Attachments

        Activity

          People

            lmohanty@redhat.com Lalatendu Mohanty
            gkarager Giriyamma Karagere Ramaswamy (Inactive)
            Giriyamma Karagere Ramaswamy Giriyamma Karagere Ramaswamy (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            4 Start watching this issue

            Dates

              Created:
              Updated: