https://prow.ci.openshift.org/view/gs/origin-ci-test/pr-logs/pull/openshift_cluster-kube-apiserver-operator/1382/pull-ci-openshift-cluster-kube-apiserver-operator-master-e2e-gcp-operator/1577508664229498880

After closer look at kube-apiserver-operator logs, the reason the cluster is not upgradeable is that the installer pods are failing to talk to API server:

<snippet from installer log>
cmd.go:418] unable to get owner reference (falling back to namespace): Unauthorized
</snippet>

This seems to be regression after rebase and has to be investigated before we release 4.12 to make sure the cert rotation works as expected and not brick clusters.

4.12 / master branch

https://prow.ci.openshift.org/job-history/gs/origin-ci-test/pr-logs/directory/pull-ci-openshift-cluster-kube-apiserver-operator-master-e2e-gcp-operator

1.
2.
3.