Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-36668

[FIPS] The catsrc is TRANSIENT_FAILURE if base image of index is quay.io/operator-framework/opm:latest

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Can't Do
    • Icon: Major Major
    • None
    • 4.17
    • OLM
    • Important
    • Yes
    • Rejected
    • False
    • Hide

      None

      Show
      None

      Description of problem:

         On FIPS cluster, the catsrc is TRANSIENT_FAILURE if base image of index is quay.io/operator-framework/opm:latest
      
      error:
      48m         Warning   Unhealthy        pod/test-xia-new-opm-t8z8v       Startup probe errored: rpc error: code = Unknown desc = command error: panic: opensslcrypto: can't initialize OpenSSL : openssl: can't retrieve OpenSSL version...
      48m         Warning   Unhealthy        pod/test-xia-new-opm-t8z8v       Startup probe errored: rpc error: code = Unknown desc = command error: panic: opensslcrypto: can't initialize OpenSSL : openssl: can't retrieve OpenSSL version...
      48m         Warning   Unhealthy        pod/test-xia-new-opm-t8z8v       Startup probe errored: rpc error: code = Unknown desc = command error: panic: opensslcrypto: can't initialize OpenSSL : openssl: can't retrieve OpenSSL version...

      Version-Release number of selected component (if applicable):

          4.17.0-0.nightly-2024-07-07-131215

      How reproducible:

          always

      Steps to Reproduce:

          1. create catalog
      xzha@xzha1-mac openshift-tests-private % cat catasrc.yaml 
      apiVersion: operators.coreos.com/v1alpha1
      kind: CatalogSource
      metadata:
        name: test-xia-new-opm
        namespace: test
      spec:
        displayName: Test
        image: quay.io/olmqe/nginxolm-operator-index:59380-test-new-opm
        publisher: OLM-QE
        sourceType: grpc
        updateStrategy:
          registryPoll:
            interval: 10m
      
          2. check status of catsrc
      
      xzha@xzha1-mac openshift-tests-private % oc get catsrc test-xia-new-opm -o yaml
      apiVersion: operators.coreos.com/v1alpha1
      kind: CatalogSource
      metadata:
        annotations:
          kubectl.kubernetes.io/last-applied-configuration: |
            {"apiVersion":"operators.coreos.com/v1alpha1","kind":"CatalogSource","metadata":{"annotations":{},"name":"test-xia-new-opm","namespace":"test"},"spec":{"displayName":"Test","image":"quay.io/olmqe/nginxolm-operator-index:59380-test-new-opm","publisher":"OLM-QE","sourceType":"grpc","updateStrategy":{"registryPoll":{"interval":"10m"}}}}
        creationTimestamp: "2024-07-08T06:35:48Z"
        generation: 1
        name: test-xia-new-opm
        namespace: test
        resourceVersion: "128016"
        uid: 5ba8a260-612a-411a-9371-07c0ea12f13c
      spec:
        displayName: Test
        image: quay.io/olmqe/nginxolm-operator-index:59380-test-new-opm
        publisher: OLM-QE
        sourceType: grpc
        updateStrategy:
          registryPoll:
            interval: 10m
      status:
        connectionState:
          address: test-xia-new-opm.test.svc:50051
          lastConnect: "2024-07-08T07:39:43Z"
          lastObservedState: TRANSIENT_FAILURE
        latestImageRegistryPoll: "2024-07-08T06:49:23Z"
        registryService:
          createdAt: "2024-07-08T06:35:49Z"
          port: "50051"
          protocol: grpc
          serviceName: test-xia-new-opm
          serviceNamespace: test
      
      
      52m         Warning   Unhealthy        pod/test-xia-new-opm-t8z8v       Startup probe errored: rpc error: code = Unknown desc = command error: panic: opensslcrypto: can't initialize OpenSSL : openssl: can't retrieve OpenSSL version...
      52m         Warning   Unhealthy        pod/test-xia-new-opm-t8z8v       Startup probe errored: rpc error: code = Unknown desc = command error: panic: opensslcrypto: can't initialize OpenSSL : openssl: can't retrieve OpenSSL version...
      52m         Warning   Unhealthy        pod/test-xia-new-opm-t8z8v       Startup probe errored: rpc error: code = Unknown desc = command error: panic: opensslcrypto: can't initialize OpenSSL : openssl: can't retrieve OpenSSL version...
      51m         Warning   Unhealthy        pod/test-xia-new-opm-t8z8v       Startup probe errored: rpc error: code = Unknown desc = command error: panic: opensslcrypto: can't initialize OpenSSL : openssl: can't retrieve OpenSSL version...
      51m         Warning   Unhealthy        pod/test-xia-new-opm-t8z8v       Startup probe errored: rpc error: code = Unknown desc = command error: panic: opensslcrypto: can't initialize OpenSSL : openssl: can't retrieve OpenSSL version...
      51m         Warning   Unhealthy        pod/test-xia-new-opm-t8z8v       Startup probe errored: rpc error: code = Unknown desc = command error: panic: opensslcrypto: can't initialize OpenSSL : openssl: can't retrieve OpenSSL version...
      51m         Warning   Unhealthy        pod/test-xia-new-opm-t8z8v       Startup probe errored: rpc error: code = Unknown desc = command error: panic: opensslcrypto: can't initialize OpenSSL : openssl: can't retrieve OpenSSL version...
      51m         Warning   Unhealthy        pod/test-xia-new-opm-t8z8v       Startup probe errored: rpc error: code = Unknown desc = command error: panic: opensslcrypto: can't initialize OpenSSL : openssl: can't retrieve OpenSSL version...
      51m         Warning   Unhealthy        pod/test-xia-new-opm-t8z8v       Startup probe errored: rpc error: code = Unknown desc = command error: panic: opensslcrypto: can't initialize OpenSSL : openssl: can't retrieve OpenSSL version...
      2m31s       Warning   Unhealthy        pod/test-xia-new-opm-t8z8v       (combined from similar events): Startup probe errored: rpc error: code = Unknown desc = command error: panic: opensslcrypto: can't initialize OpenSSL : openssl: can't retrieve OpenSSL version...
      
      
      
          3.
          

      Actual results:

          catsrc is TRANSIENT_FAILURE

      Expected results:

          catsrc is READY

      Additional info:

         I can reproduce this issue using registry.redhat.io/redhat/redhat-operator-index:v4.14 and registry.redhat.io/redhat/redhat-operator-index:v4.14-

            krizza@redhat.com Kevin Rizza
            rhn-support-xzha Xia Zhao
            Xia Zhao Xia Zhao
            Votes:
            0 Vote for this issue
            Watchers:
            4 Start watching this issue

              Created:
              Updated:
              Resolved: