Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-18780

Operand pods CrashLoopBackOff in cert-manager-operator 1.12.0 fresh installation

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done-Errata
    • Icon: Critical Critical
    • None
    • 4.14
    • cert-manager
    • Critical
    • No
    • Rejected
    • False
    • Hide

      None

      Show
      None

      Description of problem:

      Operand pods CrashLoopBackOff in cert-manager 1.12.0 fresh installation

      Version-Release number of selected component (if applicable):

      cert-manager-operator 1.12.0 in OCP 4.14.0-0.nightly-2023-09-09-164123

      How reproducible:

      Always

      Steps to Reproduce:

      1. In console, install cert-manager-operator 1.12.0
      2. Check operator status
      3. Check operand status

      Actual results:

      2. operator is good
      
      $ oc get csv -n cert-manager-operator
      NAME                            DISPLAY                                       VERSION   REPLACES                        PHASE
      cert-manager-operator.v1.12.0   cert-manager Operator for Red Hat OpenShift   1.12.0    cert-manager-operator.v1.11.4   Succeeded
      
      $ oc get po -n cert-manager-operator
      NAME                                                        READY   STATUS    RESTARTS   AGE
      cert-manager-operator-controller-manager-5c94b47cc9-qzszb   2/2     Running   0          46s
      
      3. operand pods are bad
      
      $ oc get po -n cert-manager
      NAME                                      READY   STATUS             RESTARTS      AGE
      cert-manager-7d666bd47-q5ml5              0/1     Error              2 (25s ago)   28s
      cert-manager-cainjector-f454b6bdd-72p79   0/1     CrashLoopBackOff   2 (27s ago)   46s
      cert-manager-webhook-7c7fd77c55-97bv9     0/1     CrashLoopBackOff   3 (3s ago)    46s
      
      $ oc logs -n cert-manager --previous cert-manager-7d666bd47-q5ml5
      Error: unknown flag: --acme-http01-solver-image
      Usage:
        acmesolver [flags]Flags:
            --domain string     the domain name to verify
        -h, --help              help for acmesolver
            --key string        the challenge key to respond with
            --listen-port int   the port number to listen on for connections (default 8089)
            --token string      the challenge token to verify againstE0911 09:02:44.476329       1 main.go:39] "cert-manager: error executing command" err="unknown flag: --acme-http01-solver-image"
      
      $ oc logs -n cert-manager --previous cert-manager-cainjector-f454b6bdd-72p79
      Error: unknown flag: --leader-election-namespace
      Usage:
        acmesolver [flags]Flags:
            --domain string     the domain name to verify
        -h, --help              help for acmesolver
            --key string        the challenge key to respond with
            --listen-port int   the port number to listen on for connections (default 8089)
            --token string      the challenge token to verify againstE0911 09:03:11.449881       1 main.go:39] "cert-manager: error executing command" err="unknown flag: --leader-election-namespace"
      
      $ oc logs -n cert-manager --previous cert-manager-webhook-7c7fd77c55-97bv9
      Error: unknown flag: --dynamic-serving-ca-secret-name
      Usage:
        acmesolver [flags]Flags:
            --domain string     the domain name to verify
        -h, --help              help for acmesolver
            --key string        the challenge key to respond with
            --listen-port int   the port number to listen on for connections (default 8089)
            --token string      the challenge token to verify againstE0911 09:03:13.414662       1 main.go:39] "cert-manager: error executing command" err="unknown flag: --dynamic-serving-ca-secret-name"

      Expected results:

      3. operand pods should be good

      Additional info:

      In web console,if install cert-manager-operator 1.11.4, then uninstall it, then install cert-manager-operator 1.12.0, this issue doesn't happen

            thn@redhat.com Thejas N (Inactive)
            rh-ee-yuewu Yuedong Wu
            Yuedong Wu Yuedong Wu
            Votes:
            0 Vote for this issue
            Watchers:
            4 Start watching this issue

              Created:
              Updated:
              Resolved:

                Estimated:
                Original Estimate - Not Specified
                Not Specified
                Remaining:
                Remaining Estimate - 0 minutes
                0m
                Logged:
                Time Spent - 2 hours
                2h