Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-17733

Backported credential request breaks some upgrades to 4.13.9

XMLWordPrintable

    • Important
    • No
    • Rejected
    • False
    • Hide

      None

      Show
      None
    • Hide
      Before this update, clusters using Mint mode and had their root secret removed would encounter an issue during an upgrade from 4.13.8 to 4.13.9. This was caused by a modification in the credentials request of the cluster-ingress-operator that was backported to 4.13.9.
      With this update, these types of clusters are able to update to >4.13.9 without issue.
      Show
      Before this update, clusters using Mint mode and had their root secret removed would encounter an issue during an upgrade from 4.13.8 to 4.13.9. This was caused by a modification in the credentials request of the cluster-ingress-operator that was backported to 4.13.9. With this update, these types of clusters are able to update to >4.13.9 without issue.
    • Bug Fix

      Description of problem:

      Upgrade 4.13.8 -> 4.13.9 with Mint mode, root secret was REMOVED, failed with:- lastTransitionTime: "2023-08-15T04:16:03Z"
  message: 'Parent credentials secret must be restored prior to upgrade: kube-system/aws-creds'
  reason: MissingRootCredential
  status: "False"
  type: Upgradeable

      Version-Release number of selected component (if applicable):

      4.13.9

      How reproducible:

      100%

      Steps to Reproduce:

      1.Install 4.13 aws version prior to 4.13.9
2. remove root credential: https://docs.openshift.com/container-platform/4.13/authentication/managing_cloud_provider_credentials/cco-mode-mint.html#manually-removing-cloud-creds_cco-mode-mint
3. Upgrade 4.13.9

      Actual results:

      see above

      Expected results:

      upgrade completes

      Additional info:

      https://github.com/openshift/cluster-ingress-operator/pull/972 has been verified as a fix

https://redhat-internal.slack.com/archives/C01V1DP387R/p1692096372908889?thread_ts=1692045933.376069&cid=C01V1DP387R

and

https://redhat-internal.slack.com/archives/C0200PS19PY/p1691654894556669

              gspence@redhat.com Grant Spence
              padillon Patrick Dillon
              Melvin Joseph Melvin Joseph
              Votes:
              0 Vote for this issue
              Watchers:
              9 Start watching this issue

                Created:
                Updated:
                Resolved: