Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-13049

[4.12] SNO cluster deployment failing due to authentication and console CO in degraded state

XMLWordPrintable

    • None
    • 2
    • Sprint 239, Sprint 240
    • 2
    • Rejected
    • False
    • Hide

      None

      Show
      None
    • Hide
      7/4: pending 4.13.z bug to be verified - it's waiting on an accepted nightly 4.13 build w/ the fix
      June 22,2023 : Root cause is fixed and verified in main/4.14 : OCPBUGS-6784
      Backport for 4.13 is done and ON_QA : OCPBUGS-12743
      Backport for 4.12 will be done after 4.13 is verified
      Show
      7/4: pending 4.13.z bug to be verified - it's waiting on an accepted nightly 4.13 build w/ the fix June 22,2023 : Root cause is fixed and verified in main/4.14 : OCPBUGS-6784 Backport for 4.13 is done and ON_QA : OCPBUGS-12743 Backport for 4.12 will be done after 4.13 is verified

      This is a copy of OCPBUGS-6784 for backport to 4.12.

      Original Text:

      Description of problem:

      SNO installation performed with the assisted-installer failed 
      

      Version-Release number of selected component (if applicable):

      4.10.32
      # oc get co authentication -o yaml
      - lastTransitionTime: '2023-01-30T00:51:11Z'
          message: 'IngressStateEndpointsDegraded: No subsets found for the endpoints of
            oauth-server      OAuthServerConfigObservationDegraded: secret "v4-0-config-system-router-certs"
            not found      OAuthServerDeploymentDegraded: 1 of 1 requested instances are unavailable for
            oauth-openshift.openshift-authentication (container is waiting in pending oauth-openshift-58b978d7f8-s6x4b
            pod)      OAuthServerRouteEndpointAccessibleControllerDegraded: secret "v4-0-config-system-router-certs"
      
      # oc logs ingress-operator-xxx-yyy -c ingress-operator 
      2023-01-30T08:14:13.701799050Z 2023-01-30T08:14:13.701Z ERROR   operator.certificate_publisher_controller       certificate-publisher/controller.go:80  failed to list ingresscontrollers for secret    {"related": "", "error": "Index with name field:defaultCertificateName does not exist"}
      
      Restarting the ingress-operator pod helped fix the issue, but a permanent fix is required.
      
      The Bug(https://bugzilla.redhat.com/show_bug.cgi?id=2005351) was filed earlier but closed due to inactivity.

       

       

              alebedev@redhat.com Andrey Lebedev
              rhn-support-dpateriy Divyam Pateriya
              Hongan Li Hongan Li
              Votes:
              0 Vote for this issue
              Watchers:
              8 Start watching this issue

                Created:
                Updated:
                Resolved: