-
Bug
-
Resolution: Can't Do
-
Major
-
None
-
4.17
-
Important
-
Yes
-
Rejected
-
False
-
Description of problem:
On FIPS cluster, the catsrc is TRANSIENT_FAILURE if base image of index is quay.io/operator-framework/opm:latest error: 48m Warning Unhealthy pod/test-xia-new-opm-t8z8v Startup probe errored: rpc error: code = Unknown desc = command error: panic: opensslcrypto: can't initialize OpenSSL : openssl: can't retrieve OpenSSL version... 48m Warning Unhealthy pod/test-xia-new-opm-t8z8v Startup probe errored: rpc error: code = Unknown desc = command error: panic: opensslcrypto: can't initialize OpenSSL : openssl: can't retrieve OpenSSL version... 48m Warning Unhealthy pod/test-xia-new-opm-t8z8v Startup probe errored: rpc error: code = Unknown desc = command error: panic: opensslcrypto: can't initialize OpenSSL : openssl: can't retrieve OpenSSL version...
Version-Release number of selected component (if applicable):
4.17.0-0.nightly-2024-07-07-131215
How reproducible:
always
Steps to Reproduce:
1. create catalog xzha@xzha1-mac openshift-tests-private % cat catasrc.yaml apiVersion: operators.coreos.com/v1alpha1 kind: CatalogSource metadata: name: test-xia-new-opm namespace: test spec: displayName: Test image: quay.io/olmqe/nginxolm-operator-index:59380-test-new-opm publisher: OLM-QE sourceType: grpc updateStrategy: registryPoll: interval: 10m 2. check status of catsrc xzha@xzha1-mac openshift-tests-private % oc get catsrc test-xia-new-opm -o yaml apiVersion: operators.coreos.com/v1alpha1 kind: CatalogSource metadata: annotations: kubectl.kubernetes.io/last-applied-configuration: | {"apiVersion":"operators.coreos.com/v1alpha1","kind":"CatalogSource","metadata":{"annotations":{},"name":"test-xia-new-opm","namespace":"test"},"spec":{"displayName":"Test","image":"quay.io/olmqe/nginxolm-operator-index:59380-test-new-opm","publisher":"OLM-QE","sourceType":"grpc","updateStrategy":{"registryPoll":{"interval":"10m"}}}} creationTimestamp: "2024-07-08T06:35:48Z" generation: 1 name: test-xia-new-opm namespace: test resourceVersion: "128016" uid: 5ba8a260-612a-411a-9371-07c0ea12f13c spec: displayName: Test image: quay.io/olmqe/nginxolm-operator-index:59380-test-new-opm publisher: OLM-QE sourceType: grpc updateStrategy: registryPoll: interval: 10m status: connectionState: address: test-xia-new-opm.test.svc:50051 lastConnect: "2024-07-08T07:39:43Z" lastObservedState: TRANSIENT_FAILURE latestImageRegistryPoll: "2024-07-08T06:49:23Z" registryService: createdAt: "2024-07-08T06:35:49Z" port: "50051" protocol: grpc serviceName: test-xia-new-opm serviceNamespace: test 52m Warning Unhealthy pod/test-xia-new-opm-t8z8v Startup probe errored: rpc error: code = Unknown desc = command error: panic: opensslcrypto: can't initialize OpenSSL : openssl: can't retrieve OpenSSL version... 52m Warning Unhealthy pod/test-xia-new-opm-t8z8v Startup probe errored: rpc error: code = Unknown desc = command error: panic: opensslcrypto: can't initialize OpenSSL : openssl: can't retrieve OpenSSL version... 52m Warning Unhealthy pod/test-xia-new-opm-t8z8v Startup probe errored: rpc error: code = Unknown desc = command error: panic: opensslcrypto: can't initialize OpenSSL : openssl: can't retrieve OpenSSL version... 51m Warning Unhealthy pod/test-xia-new-opm-t8z8v Startup probe errored: rpc error: code = Unknown desc = command error: panic: opensslcrypto: can't initialize OpenSSL : openssl: can't retrieve OpenSSL version... 51m Warning Unhealthy pod/test-xia-new-opm-t8z8v Startup probe errored: rpc error: code = Unknown desc = command error: panic: opensslcrypto: can't initialize OpenSSL : openssl: can't retrieve OpenSSL version... 51m Warning Unhealthy pod/test-xia-new-opm-t8z8v Startup probe errored: rpc error: code = Unknown desc = command error: panic: opensslcrypto: can't initialize OpenSSL : openssl: can't retrieve OpenSSL version... 51m Warning Unhealthy pod/test-xia-new-opm-t8z8v Startup probe errored: rpc error: code = Unknown desc = command error: panic: opensslcrypto: can't initialize OpenSSL : openssl: can't retrieve OpenSSL version... 51m Warning Unhealthy pod/test-xia-new-opm-t8z8v Startup probe errored: rpc error: code = Unknown desc = command error: panic: opensslcrypto: can't initialize OpenSSL : openssl: can't retrieve OpenSSL version... 51m Warning Unhealthy pod/test-xia-new-opm-t8z8v Startup probe errored: rpc error: code = Unknown desc = command error: panic: opensslcrypto: can't initialize OpenSSL : openssl: can't retrieve OpenSSL version... 2m31s Warning Unhealthy pod/test-xia-new-opm-t8z8v (combined from similar events): Startup probe errored: rpc error: code = Unknown desc = command error: panic: opensslcrypto: can't initialize OpenSSL : openssl: can't retrieve OpenSSL version... 3.
Actual results:
catsrc is TRANSIENT_FAILURE
Expected results:
catsrc is READY
Additional info:
I can reproduce this issue using registry.redhat.io/redhat/redhat-operator-index:v4.14 and registry.redhat.io/redhat/redhat-operator-index:v4.14-
- is related to
-
OCPBUGS-35808 [TP][OLMv1] "olm" degraded due to error "FIPS mode is enabled, but the required OpenSSL backend is unavailable" from openshift-rukpak pods in the FIPS enabled cluster
- Closed