Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-49775

rackm03 is created with /etc/containers/policy.json with default type: 'reject'

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Normal Normal
    • None
    • 4.18.0
    • Node / CRI-O
    • Critical
    • None
    • Rejected
    • False
    • Hide

      None

      Show
      None

      Description of problem:

          rackm03 is created with /etc/containers/policy.json with below value---{
        "default": [
          {
            "type": "reject"
          }
        ],
      Because of this image pulls were getting rejected, at the beginning Fusion build team helped with the debug and we changed it to{
        "default": [
          {
            "type": "insecureAcceptAnything"
          }
      Due to this value mismatch with deployment time, whenever the nodes are rebooted mcp goes down to degradedoc get mcp
      NAME     CONFIG                                             UPDATED   UPDATING   DEGRADED   MACHINECOUNT   READYMACHINECOUNT   UPDATEDMACHINECOUNT   DEGRADEDMACHINECOUNT   AGE
      master   rendered-master-ea91cb740e8a0ed66bf93687ad41f317   False     True       True       3              0                   0                     3                      69d
      worker   rendered-worker-7780c0ae34056a28c6a6a341afdfcb65   False     True       True       3              0                   0                     3                      69d
      
      'Node compute-1-ru5.rackm03.mydomain.com is reporting: "unexpected on-disk
            state validating against rendered-worker-7780c0ae34056a28c6a6a341afdfcb65: content
            mismatch for file \"/etc/containers/policy.json\"", Node compute-1-ru6.rackm03.mydomain.com
            is reporting: "unexpected on-disk state validating against rendered-worker-7780c0ae34056a28c6a6a341afdfcb65:
            content mismatch for file \"/etc/containers/policy.json\"", Node compute-1-ru7.rackm03.mydomain.com
            is reporting: "unexpected on-disk state validating against rendered-worker-7780c0ae34056a28c6a6a341afdfcb65:
            content mismatch for file \"/etc/containers/policy.json\""'
          reason: 3 nodes are reporting degraded status on sync

      Is there any specific reason to create this rack with default type: reject ? As generally we see clusters are created with default type: insecureAcceptAnything . Even for rackm14 also its type: insecureAcceptAnything.

      Version-Release number of selected component (if applicable):

          Seen this for rackm03
          ocp: 4.18.0-rc.6 <the cluster was handed over with ocp 4.16 have upgraded to ocp 4.18 later>

       

      How reproducible:

         It is observed every time nodes are restarted

      Steps to Reproduce:

          1.
          2.
          3.
          

      Actual results:

          

      Expected results:

          

      Additional info:

          

              qiwan233 Qi Wang
              ammahapa@redhat.com Amrita Mahapatra
              Sergio Regidor de la Rosa Sergio Regidor de la Rosa
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

                Created:
                Updated: