Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-44563

Cert-manager: invalid memory address or nil pointer reference in certificate validity fields.

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Undefined Undefined
    • None
    • 4.14.z
    • cert-manager
    • None
    • None
    • False
    • Hide

      None

      Show
      None

      Description of problem:

      Some ugly panic/nil pointer logs in cert-manager pod.   

      Version-Release number of selected component (if applicable):

      cert-manager 1.14.1
      OpenShift 4.14.16 (ARO)

      How reproducible:

      Have cert-manager installed, and create a ClusterIssuer against Red Hat IdM ACME, using a HTTP01 solver. Create a dummy certificate and see cert-manager logs.
      
      ---
      apiVersion: cert-manager.io/v1
      kind: ClusterIssuer
      metadata:
        name: idm-acme
      spec:
        acme:
          preferredChain: ""
          privateKeySecretRef:
            name: idm-acme-issuer-private-key
          server: https://idm.xxx.yyy/acme/directory
          solvers:
          - http01:
              ingress:
                ingressClassName: openshift-default
      ---
      apiVersion: cert-manager.io/v1
      kind: Certificate
      metadata:
        name: test-cert
        namespace: test-cert-manager
      spec:
        isCA: false
        secretName: test-cert
        commonName: "test-cert-manager.apps.qisdetdd.eastus.aroapp.io"
        dnsNames:
        - "test-cert-manager.apps.qisdetdd.eastus.aroapp.io"
        issuerRef:
          name: idm-acme
          kind: ClusterIssuer
      ---
      
      
      

      Steps to Reproduce:

          1.Create cert-manager ClusterIssuer
          2.Increase cert-manager log levels to TraceAll
          3.Create any dummy Certificate
          4.Check cert-manager pod logs
      
          

      Actual results:

      Some ugly panic/nil pointer logs in cert-manager pod:
      
      I1113 16:08:47.256372       1 readiness_controller.go:191] "updating status fields" logger="cert-manager.certificates-readiness" key="test-cert-manager/debug-13h" notAfter="<panic: runtime error: invalid memory address or nil pointer dereference>" notBefore="<panic: runtime error: invalid memory address or nil pointer dereference>" renewalTime="<panic: runtime error: invalid memory address or nil pointer dereference>"   
      
      
      

      Expected results:

          

      Additional info:

      Not sure if this just ugly logs or is having an impact on cert-manager functionality, I have not been abled to figure this out just yet.

              tgeer@redhat.com Trilok Geer
              jtudelag@redhat.com Jorge Luis Tudela Gonzalez de Riancho
              Yuedong Wu Yuedong Wu
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated: