Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-34391

vsphere failing to provision machines on certificate signed by unknown authority

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Major Major
    • None
    • 4.17.0
    • Unknown
    • Important
    • None
    • False
    • Hide

      None

      Show
      None

      vSphere installs have begun failing, you'll see prowjobs fail on a handful of operators showing problems similar to:

      https://prow.ci.openshift.org/view/gs/test-platform-results/pr-logs/pull/openshift_cluster-network-operator/2382/pull-ci-openshift-cluster-network-operator-master-e2e-vsphere-ovn/1793599469497880576

      Expanding the camgi spyglass pane and viewing machines, you'll see all machines failed to provision with the following status:

      status:
  conditions:
  - lastTransitionTime: "2024-05-23T11:25:18Z"
    status: "True"
    type: Drainable
  - lastTransitionTime: "2024-05-23T11:25:18Z"
    message: 'Failed to check if machine exists: ci-op-p18f3k9n-22566-hcc68-master-0:
      failed to create scope for machine: failed to create vSphere session: error
      setting up new vSphere SOAP client: Post "https://vcs8e-vc.ocp2.dev.cluster.com/sdk":
      tls: failed to verify certificate: x509: certificate signed by unknown authority'
    reason: ErrorCheckingProvider
    status: Unknown
    type: InstanceExists
  - lastTransitionTime: "2024-05-23T11:25:18Z"
    status: "True"
    type: Terminable
  lastUpdated: "2024-05-23T11:25:18Z"
  phase: ""

      Discussion: https://redhat-internal.slack.com/archives/C015H2WDJRY/p1716310080409929

      jcallen@redhat.com traced this to: https://github.com/openshift/machine-api-operator/pull/1234

      We are proceeding with the revert, and this bug can be used for reintroducing the change with a layered commit to fix.

            rhn-engineering-dgoodwin Devan Goodwin
            rhn-engineering-dgoodwin Devan Goodwin
            Zhaohua Sun Zhaohua Sun
            Votes:
            0 Vote for this issue
            Watchers:
            5 Start watching this issue

              Created:
              Updated: