Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-37666

NMstate: Failed to create a nmstate policy - failed to verify certificate

XMLWordPrintable

    • +
    • Important
    • No
    • Rejected
    • False
    • Hide

      None

      Show
      None
    • Hide
      Issue: when applying a `NodeNetworkConfigurationPolicy` CR, the Kubernetes NMState Operator may fail with an internal error calling one of its webhooks ("failed to verify certificate").
      Workaround: try re-applying the desired `NodeNetworkConfigurationPolicy` CR.
      Show
      Issue: when applying a `NodeNetworkConfigurationPolicy` CR, the Kubernetes NMState Operator may fail with an internal error calling one of its webhooks ("failed to verify certificate"). Workaround: try re-applying the desired `NodeNetworkConfigurationPolicy` CR.
    • Known Issue
    • Proposed

      Description of problem:
      Failed create a nmstate policy 

      $ oc apply -f Features/excreat/Polarion/TC2/nncp.yaml
Error from server (InternalError): error when creating "Features/excreat/Polarion/TC2/nncp.yaml": Internal error occurred: failed calling webhook "nodenetworkconfigurationpolicies-mutate.nmstate.io": failed to call webhook: Post "https://nmstate-webhook.openshift-nmstate.svc:443/nodenetworkconfigurationpolicies-mutate?timeout=10s": tls: failed to verify certificate: x509: certificate signed by unknown authority (possibly because of "crypto/rsa: verification error" while trying to verify candidate authority certificate "nmstate")
      apiVersion: nmstate.io/v1
kind: NodeNetworkConfigurationPolicy
metadata:
  name: br1-eth1-policy 
spec:
  nodeSelector: 
    node-role.kubernetes.io/worker: "" 
  maxUnavailable: 3 
  desiredState:
    interfaces:
      - name: ens5f0
        description: Create VFs
        type: ethernet
        state: up
        ethernet:
          sr-iov:
            total-vfs: 5

       

      Version-Release number of selected component (if applicable):

      4.17.0-ec.2

      kubernetes-nmstate-operator.4.17.0-202407251411

      How reproducible:

      50%

      Steps to Reproduce:
      1. Apply a NodeNetworkConfigurationPolicy
      2.
      3.
      Actual results:
      Error

      Expected results:

      $ oc apply -f Features/excreat/Polarion/TC2/nncp.yaml nodenetworkconfigurationpolicy.nmstate.io/br1-eth1-policy created

      Additional info:

            mkowalsk@redhat.com Mat Kowalski
            rhn-cnf-elevin Evgeny Levin
            Votes:
            0 Vote for this issue
            Watchers:
            16 Start watching this issue

              Created:
              Updated: