-
Bug
-
Resolution: Done-Errata
-
Critical
-
None
-
4.14
-
Critical
-
No
-
Rejected
-
False
-
Description of problem:
Operand pods CrashLoopBackOff in cert-manager 1.12.0 fresh installation
Version-Release number of selected component (if applicable):
cert-manager-operator 1.12.0 in OCP 4.14.0-0.nightly-2023-09-09-164123
How reproducible:
Always
Steps to Reproduce:
1. In console, install cert-manager-operator 1.12.0 2. Check operator status 3. Check operand status
Actual results:
2. operator is good $ oc get csv -n cert-manager-operator NAME DISPLAY VERSION REPLACES PHASE cert-manager-operator.v1.12.0 cert-manager Operator for Red Hat OpenShift 1.12.0 cert-manager-operator.v1.11.4 Succeeded $ oc get po -n cert-manager-operator NAME READY STATUS RESTARTS AGE cert-manager-operator-controller-manager-5c94b47cc9-qzszb 2/2 Running 0 46s 3. operand pods are bad $ oc get po -n cert-manager NAME READY STATUS RESTARTS AGE cert-manager-7d666bd47-q5ml5 0/1 Error 2 (25s ago) 28s cert-manager-cainjector-f454b6bdd-72p79 0/1 CrashLoopBackOff 2 (27s ago) 46s cert-manager-webhook-7c7fd77c55-97bv9 0/1 CrashLoopBackOff 3 (3s ago) 46s $ oc logs -n cert-manager --previous cert-manager-7d666bd47-q5ml5 Error: unknown flag: --acme-http01-solver-image Usage: acmesolver [flags]Flags: --domain string the domain name to verify -h, --help help for acmesolver --key string the challenge key to respond with --listen-port int the port number to listen on for connections (default 8089) --token string the challenge token to verify againstE0911 09:02:44.476329 1 main.go:39] "cert-manager: error executing command" err="unknown flag: --acme-http01-solver-image" $ oc logs -n cert-manager --previous cert-manager-cainjector-f454b6bdd-72p79 Error: unknown flag: --leader-election-namespace Usage: acmesolver [flags]Flags: --domain string the domain name to verify -h, --help help for acmesolver --key string the challenge key to respond with --listen-port int the port number to listen on for connections (default 8089) --token string the challenge token to verify againstE0911 09:03:11.449881 1 main.go:39] "cert-manager: error executing command" err="unknown flag: --leader-election-namespace" $ oc logs -n cert-manager --previous cert-manager-webhook-7c7fd77c55-97bv9 Error: unknown flag: --dynamic-serving-ca-secret-name Usage: acmesolver [flags]Flags: --domain string the domain name to verify -h, --help help for acmesolver --key string the challenge key to respond with --listen-port int the port number to listen on for connections (default 8089) --token string the challenge token to verify againstE0911 09:03:13.414662 1 main.go:39] "cert-manager: error executing command" err="unknown flag: --dynamic-serving-ca-secret-name"
Expected results:
3. operand pods should be good
Additional info:
In web console,if install cert-manager-operator 1.11.4, then uninstall it, then install cert-manager-operator 1.12.0, this issue doesn't happen
- links to
-
RHEA-2023:119787 cert-manager Operator for Red Hat OpenShift 1.12.0
- mentioned on