Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-42222

NMstate operator unusable after 2 weeks of use due to failed certificate validation

XMLWordPrintable

      Description of problem:

      
      Error happened randomly after two weeks of using the nmstate operator. After a couple attempts to-recreate, same error was cropping up.
      
      I deleted the operand, uninstalled the operator, re-installed operator and created the operand. The error went away after doing that. Sounds like a bug to me.
      
          

      Version-Release number of selected component (if applicable):

      OCP 4.16.8
          

      How reproducible:

      I dont really know, it just happened after two weeks of use.
          

      Steps to Reproduce:

          1. Install NMstate operator
          2. Create operand
          3. Create NNCP to create OVS bridge 
          4. Create NNCP to create OVS bridge mapping
          5. Create NNCP to create OVS bridge 
          6. Create NNCP to create OVS bridge mapping
          7. Create NNCP to create OVS bridge 
          8. Create NNCP to create OVS bridge mapping
          9. Create NNCP to create OVS bridge 
          10. Create NNCP to create OVS bridge mapping
          11. Repeat 3-9 couple more times over two weeks
      
      
          

      Actual results:

      Eventually the NNCP fails to create with this error:
      
      An error occurred
      Error "failed calling webhook "nodenetworkconfigurationpolicies-mutate.nmstate.io": failed to call webhook: Post "https://nmstate-webhook.openshift-nmstate.svc:443/nodenetworkconfigurationpolicies-mutate?timeout=10s": tls: failed to verify certificate: x509: certificate signed by unknown authority" for field "undefined".
          

      Expected results:

      NNCP to create NNCE and lay down the desired state from nmstate
          

      Additional info:

      
          

              mkowalsk@redhat.com Mat Kowalski
              rh-ee-mlecki Maciej Lecki
              Qiong Wang Qiong Wang
              Votes:
              0 Vote for this issue
              Watchers:
              10 Start watching this issue

                Created:
                Updated:
                Resolved: