-
Bug
-
Resolution: Done-Errata
-
Critical
-
4.14.0
-
+
-
Critical
-
Yes
-
ShiftStack Sprint 241
-
1
-
Approved
-
False
-
-
Release Note Not Required
Description of problem:
Installation with Kuryr is failing because multiple components are attempting to connect to the API and fail with the following error: failed checking apiserver connectivity: Get "https://172.30.0.1:443/apis/coordination.k8s.io/v1/namespaces/openshift-service-ca/leases/service-ca-controller-lock": tls: failed to verify certificate: x509: cannot validate certificate for 172.30.0.1 because it doesn't contain any IP SANs $ oc get po -A -o wide |grep -v Running |grep -v Pending |grep -v Completed NAMESPACE NAME READY STATUS RESTARTS AGE IP NODE NOMINATED NODE READINESS GATES openshift-apiserver-operator openshift-apiserver-operator-559d855c56-c2rdr 0/1 CrashLoopBackOff 42 (2m28s ago) 3h44m 10.128.16.86 kuryr-5sxhw-master-2 <none> <none> openshift-apiserver apiserver-6b9f5d48c4-bj6s6 0/2 CrashLoopBackOff 92 (4m25s ago) 3h36m 10.128.70.10 kuryr-5sxhw-master-2 <none> <none> openshift-cluster-csi-drivers manila-csi-driver-operator-75b64d8797-fckf5 0/1 CrashLoopBackOff 42 (119s ago) 3h41m 10.128.56.21 kuryr-5sxhw-master-0 <none> <none> openshift-cluster-csi-drivers openstack-cinder-csi-driver-operator-84dfd8d89f-kgtr8 0/1 CrashLoopBackOff 42 (82s ago) 3h41m 10.128.56.9 kuryr-5sxhw-master-0 <none> <none> openshift-cluster-node-tuning-operator cluster-node-tuning-operator-7fbb66545c-kh6th 0/1 CrashLoopBackOff 46 (3m5s ago) 3h44m 10.128.6.40 kuryr-5sxhw-master-2 <none> <none> openshift-cluster-storage-operator cluster-storage-operator-5545dfcf6d-n497j 0/1 CrashLoopBackOff 42 (2m23s ago) 3h44m 10.128.21.175 kuryr-5sxhw-master-2 <none> <none> openshift-cluster-storage-operator csi-snapshot-controller-ddb9469f9-bc4bb 0/1 CrashLoopBackOff 45 (2m17s ago) 3h41m 10.128.20.106 kuryr-5sxhw-master-1 <none> <none> openshift-cluster-storage-operator csi-snapshot-controller-operator-6d7b66dbdd-xdwcs 0/1 CrashLoopBackOff 42 (92s ago) 3h44m 10.128.21.220 kuryr-5sxhw-master-2 <none> <none> openshift-config-operator openshift-config-operator-c5d5d964-2w2bv 0/1 CrashLoopBackOff 80 (3m39s ago) 3h44m 10.128.43.39 kuryr-5sxhw-master-2 <none> <none> openshift-controller-manager-operator openshift-controller-manager-operator-754d748cf7-rzq6f 0/1 CrashLoopBackOff 42 (3m6s ago) 3h44m 10.128.25.166 kuryr-5sxhw-master-2 <none> <none> openshift-etcd-operator etcd-operator-76ddc94887-zqkn7 0/1 CrashLoopBackOff 49 (30s ago) 3h44m 10.128.32.146 kuryr-5sxhw-master-2 <none> <none> openshift-ingress-operator ingress-operator-9f76cf75b-cjx9t 1/2 CrashLoopBackOff 39 (3m24s ago) 3h44m 10.128.9.108 kuryr-5sxhw-master-2 <none> <none> openshift-insights insights-operator-776cd7cfb4-8gzz7 0/1 CrashLoopBackOff 46 (4m21s ago) 3h44m 10.128.15.102 kuryr-5sxhw-master-2 <none> <none> openshift-kube-apiserver-operator kube-apiserver-operator-64f4db777f-7n9jv 0/1 CrashLoopBackOff 42 (113s ago) 3h44m 10.128.18.199 kuryr-5sxhw-master-2 <none> <none> openshift-kube-apiserver installer-5-kuryr-5sxhw-master-1 0/1 Error 0 3h35m 10.128.68.176 kuryr-5sxhw-master-1 <none> <none> openshift-kube-controller-manager-operator kube-controller-manager-operator-746497b-dfbh5 0/1 CrashLoopBackOff 42 (2m23s ago) 3h44m 10.128.13.162 kuryr-5sxhw-master-2 <none> <none> openshift-kube-controller-manager installer-4-kuryr-5sxhw-master-0 0/1 Error 0 3h35m 10.128.65.186 kuryr-5sxhw-master-0 <none> <none> openshift-kube-scheduler-operator openshift-kube-scheduler-operator-695fb4449f-j9wqx 0/1 CrashLoopBackOff 42 (63s ago) 3h44m 10.128.44.194 kuryr-5sxhw-master-2 <none> <none> openshift-kube-scheduler installer-5-kuryr-5sxhw-master-0 0/1 Error 0 3h35m 10.128.60.44 kuryr-5sxhw-master-0 <none> <none> openshift-kube-storage-version-migrator-operator kube-storage-version-migrator-operator-6c5cd46578-qpk5z 0/1 CrashLoopBackOff 42 (2m18s ago) 3h44m 10.128.4.120 kuryr-5sxhw-master-2 <none> <none> openshift-machine-api cluster-autoscaler-operator-7b667675db-tmlcb 1/2 CrashLoopBackOff 46 (2m53s ago) 3h45m 10.128.28.146 kuryr-5sxhw-master-2 <none> <none> openshift-machine-api machine-api-controllers-fdb99649c-ldb7t 3/7 CrashLoopBackOff 184 (2m55s ago) 3h40m 10.128.29.90 kuryr-5sxhw-master-0 <none> <none> openshift-route-controller-manager route-controller-manager-d8f458684-7dgjm 0/1 CrashLoopBackOff 43 (100s ago) 3h36m 10.128.55.11 kuryr-5sxhw-master-2 <none> <none> openshift-service-ca-operator service-ca-operator-654f68c77f-g4w55 0/1 CrashLoopBackOff 42 (2m2s ago) 3h45m 10.128.22.30 kuryr-5sxhw-master-2 <none> <none> openshift-service-ca service-ca-5f584b7d75-mxllm 0/1 CrashLoopBackOff 42 (45s ago) 3h42m 10.128.49.250 kuryr-5sxhw-master-0 <none> <none>
$ oc get svc -A |grep 172.30.0.1 default kubernetes ClusterIP 172.30.0.1 <none> 443/TCP 3h50m
Version-Release number of selected component (if applicable):
How reproducible:
Steps to Reproduce:
1. 2. 3.
Actual results:
Expected results:
Additional info:
- blocks
-
OCPBUGS-18728 Fail to install with Kuryr due to issue when validating certificate for the API
- Closed
- is cloned by
-
OCPBUGS-18728 Fail to install with Kuryr due to issue when validating certificate for the API
- Closed
- links to
-
RHEA-2023:7198 rpm