-
Bug
-
Resolution: Done
-
Major
-
4.14, 4.15
-
None
Upon debugging, nodes are stuck in NotReady state and CNI is not initialised on them.
Seeing the following error log in cluster network operator
failed parsing certificate data from ConfigMap "openshift-service-ca.crt": failed to parse certificate PEM
CNO operator logs: https://docs.google.com/document/d/1hor1r9ue4gnetkXm9mh8AKa7vm8zNBPhUQqWCbbnnUc/edit?usp=sharing
This is happening on a management cluster that is configured to use legacy service CA's:
$ oc get kubecontrollermanager/cluster -o yaml --as system:admin apiVersion: operator.openshift.io/v1 kind: KubeControllerManager metadata: name: cluster spec: logLevel: Normal managementState: Managed operatorLogLevel: Normal unsupportedConfigOverrides: null useMoreSecureServiceCA: false
In newer clusters, useMoreSecureServiceCA is set to true.
- duplicates
-
OCPBUGS-24216 HyperShift hosted cluster failed to create due to CNO timeout
- Closed
- links to
-
RHEA-2024:0041 OpenShift Container Platform 4.16.z bug fix update