Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-18728

Fail to install with Kuryr due to issue when validating certificate for the API


    • +
    • Critical
    • No
    • False
    • Hide


    • Release Note Not Required

      This is a clone of issue OCPBUGS-18517. The following is the description of the original issue:

      Description of problem:

      Installation with Kuryr is failing because multiple components are attempting to connect to the API and fail with the following error:
      failed checking apiserver connectivity: Get "": tls: failed to verify certificate: x509: cannot validate certificate for because it doesn't contain any IP SANs
      $ oc get po -A -o wide |grep -v Running |grep -v Pending |grep -v Completed
      NAMESPACE                                          NAME                                                        READY   STATUS             RESTARTS          AGE     IP              NODE                   NOMINATED NODE   READINESS GATES
      openshift-apiserver-operator                       openshift-apiserver-operator-559d855c56-c2rdr               0/1     CrashLoopBackOff   42 (2m28s ago)    3h44m    kuryr-5sxhw-master-2   <none>           <none>
      openshift-apiserver                                apiserver-6b9f5d48c4-bj6s6                                  0/2     CrashLoopBackOff   92 (4m25s ago)    3h36m    kuryr-5sxhw-master-2   <none>           <none>
      openshift-cluster-csi-drivers                      manila-csi-driver-operator-75b64d8797-fckf5                 0/1     CrashLoopBackOff   42 (119s ago)     3h41m    kuryr-5sxhw-master-0   <none>           <none>
      openshift-cluster-csi-drivers                      openstack-cinder-csi-driver-operator-84dfd8d89f-kgtr8       0/1     CrashLoopBackOff   42 (82s ago)      3h41m     kuryr-5sxhw-master-0   <none>           <none>
      openshift-cluster-node-tuning-operator             cluster-node-tuning-operator-7fbb66545c-kh6th               0/1     CrashLoopBackOff   46 (3m5s ago)     3h44m     kuryr-5sxhw-master-2   <none>           <none>
      openshift-cluster-storage-operator                 cluster-storage-operator-5545dfcf6d-n497j                   0/1     CrashLoopBackOff   42 (2m23s ago)    3h44m   kuryr-5sxhw-master-2   <none>           <none>
      openshift-cluster-storage-operator                 csi-snapshot-controller-ddb9469f9-bc4bb                     0/1     CrashLoopBackOff   45 (2m17s ago)    3h41m   kuryr-5sxhw-master-1   <none>           <none>
      openshift-cluster-storage-operator                 csi-snapshot-controller-operator-6d7b66dbdd-xdwcs           0/1     CrashLoopBackOff   42 (92s ago)      3h44m   kuryr-5sxhw-master-2   <none>           <none>
      openshift-config-operator                          openshift-config-operator-c5d5d964-2w2bv                    0/1     CrashLoopBackOff   80 (3m39s ago)    3h44m    kuryr-5sxhw-master-2   <none>           <none>
      openshift-controller-manager-operator              openshift-controller-manager-operator-754d748cf7-rzq6f      0/1     CrashLoopBackOff   42 (3m6s ago)     3h44m   kuryr-5sxhw-master-2   <none>           <none>
      openshift-etcd-operator                            etcd-operator-76ddc94887-zqkn7                              0/1     CrashLoopBackOff   49 (30s ago)      3h44m   kuryr-5sxhw-master-2   <none>           <none>
      openshift-ingress-operator                         ingress-operator-9f76cf75b-cjx9t                            1/2     CrashLoopBackOff   39 (3m24s ago)    3h44m    kuryr-5sxhw-master-2   <none>           <none>
      openshift-insights                                 insights-operator-776cd7cfb4-8gzz7                          0/1     CrashLoopBackOff   46 (4m21s ago)    3h44m   kuryr-5sxhw-master-2   <none>           <none>
      openshift-kube-apiserver-operator                  kube-apiserver-operator-64f4db777f-7n9jv                    0/1     CrashLoopBackOff   42 (113s ago)     3h44m   kuryr-5sxhw-master-2   <none>           <none>
      openshift-kube-apiserver                           installer-5-kuryr-5sxhw-master-1                            0/1     Error              0                 3h35m   kuryr-5sxhw-master-1   <none>           <none>
      openshift-kube-controller-manager-operator         kube-controller-manager-operator-746497b-dfbh5              0/1     CrashLoopBackOff   42 (2m23s ago)    3h44m   kuryr-5sxhw-master-2   <none>           <none>
      openshift-kube-controller-manager                  installer-4-kuryr-5sxhw-master-0                            0/1     Error              0                 3h35m   kuryr-5sxhw-master-0   <none>           <none>
      openshift-kube-scheduler-operator                  openshift-kube-scheduler-operator-695fb4449f-j9wqx          0/1     CrashLoopBackOff   42 (63s ago)      3h44m   kuryr-5sxhw-master-2   <none>           <none>
      openshift-kube-scheduler                           installer-5-kuryr-5sxhw-master-0                            0/1     Error              0                 3h35m    kuryr-5sxhw-master-0   <none>           <none>
      openshift-kube-storage-version-migrator-operator   kube-storage-version-migrator-operator-6c5cd46578-qpk5z     0/1     CrashLoopBackOff   42 (2m18s ago)    3h44m    kuryr-5sxhw-master-2   <none>           <none>
      openshift-machine-api                              cluster-autoscaler-operator-7b667675db-tmlcb                1/2     CrashLoopBackOff   46 (2m53s ago)    3h45m   kuryr-5sxhw-master-2   <none>           <none>
      openshift-machine-api                              machine-api-controllers-fdb99649c-ldb7t                     3/7     CrashLoopBackOff   184 (2m55s ago)   3h40m    kuryr-5sxhw-master-0   <none>           <none>
      openshift-route-controller-manager                 route-controller-manager-d8f458684-7dgjm                    0/1     CrashLoopBackOff   43 (100s ago)     3h36m    kuryr-5sxhw-master-2   <none>           <none>
      openshift-service-ca-operator                      service-ca-operator-654f68c77f-g4w55                        0/1     CrashLoopBackOff   42 (2m2s ago)     3h45m    kuryr-5sxhw-master-2   <none>           <none>
      openshift-service-ca                               service-ca-5f584b7d75-mxllm                                 0/1     CrashLoopBackOff   42 (45s ago)      3h42m   kuryr-5sxhw-master-0   <none>           <none>
      $ oc get svc -A |grep 
      default                                            kubernetes                                       ClusterIP       <none>        443/TCP                           3h50m


      Version-Release number of selected component (if applicable):


      How reproducible:


      Steps to Reproduce:


      Actual results:


      Expected results:


      Additional info:


            mdulko Michał Dulko
            openshift-crt-jira-prow OpenShift Prow Bot
            Yaakov Khodorkovski Yaakov Khodorkovski
            0 Vote for this issue
            7 Start watching this issue