Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-36291

Cloud credential operator logs two errors per second when awsSTSIAMRoleARN is empty

XMLWordPrintable

    • Moderate
    • No
    • False
    • Hide

      None

      Show
      None
    • Hide
      * In an AWS STS cluster, the Cloud Credential Operator (CCO) checks `awsSTSIAMRoleARN` in `CredentialsRequest` to create the secret. Previously, CCO logged an error if `awsSTSIAMRoleARN` was not present, which resulted in multiple errors per second. with this release, CCO does not log the error and the issue has been resolved. (link:https://issues.redhat.com/browse/OCPBUGS-36291[*OCPBUGS-36291*])
      Show
      * In an AWS STS cluster, the Cloud Credential Operator (CCO) checks `awsSTSIAMRoleARN` in `CredentialsRequest` to create the secret. Previously, CCO logged an error if `awsSTSIAMRoleARN` was not present, which resulted in multiple errors per second. with this release, CCO does not log the error and the issue has been resolved. (link: https://issues.redhat.com/browse/OCPBUGS-36291 [* OCPBUGS-36291 *])
    • Bug Fix
    • In Progress

      This is a clone of issue OCPBUGS-34117. The following is the description of the original issue:
      —
      This is a clone of issue OCPBUGS-33566. The following is the description of the original issue:
      —
      Description of problem:

      When the cloud-credential operator is used in manual mode, and awsSTSIAMRoleARN is not present in the secret operator pods, it throws aggressive errors every second. 

One of the customer concern about the number of errors from the operator pods

Two errors per second
============================
time="2024-05-10T00:43:45Z" level=error msg="error syncing credentials: an empty awsSTSIAMRoleARN was found so no Secret was created" controller=credreq cr=openshift-cloud-credential-operator/aws-ebs-csi-driver-operator secret=openshift-cluster-csi-drivers/ebs-cloud-credentials

time="2024-05-10T00:43:46Z" level=error msg="errored with condition: CredentialsProvisionFailure" controller=credreq cr=openshift-cloud-credential-operator/aws-ebs-csi-driver-operator secret=openshift-cluster-csi-drivers/ebs-cloud-credentials

      Version-Release number of selected component (if applicable):

          4.15.3

      How reproducible:

          Always present in managed rosa clusters

      Steps to Reproduce:

          1.create a rosa cluster 
    2.check the errors of cloud credentials operator pods 
    3.

      Actual results:

          The CCO logs continually throw errors

      Expected results:

          The CCO logs should not be continually throwing these errors.

      Additional info:

          The focus of this bug is only to remove the error lines from the logs. The underlying issue, of continually attempting to reconcile the CRs will be handled by other bugs.

              jstuever@redhat.com Jeremiah Stuever
              openshift-crt-jira-prow OpenShift Prow Bot
              Mingxia Huang Mingxia Huang
              Votes:
              0 Vote for this issue
              Watchers:
              7 Start watching this issue

                Created:
                Updated:
                Resolved: