-
Bug
-
Resolution: Not a Bug
-
Undefined
-
None
-
4.16
-
Critical
-
None
-
False
-
Description of problem:
Node NotReady ovnkube CrashLoopBackOff
ovnkube.go:136] failed to run ovnkube: failed to start node network controller: failed to start default node network controller: failed to set node k8s-670.dc annotations: admission webhook "node.network-node-identity.openshift.io" denied the request: user: "system:ovn-node:k8s-670.dc" is not allowed to set k8s.ovn.org/node-chassis-id on node "k8s-670.dc": k8s.ovn.org/node-chassis-id cannot be changed once set
Version-Release number of selected component (if applicable):
4.16.10
How reproducible:
Sometimes
Steps to Reproduce:
1. deploy nmstate {{br-ex}} replacement with balance-slb
2. reboot
3. apply new MachineConfig
Actual results:
Node goes NotReady ovnkube CrashLoopBackOff
ovnkube.go:136] failed to run ovnkube: failed to start node network controller: failed to start default node network controller: failed to set node k8s-670.dc annotations: admission webhook "node.network-node-identity.openshift.io" denied the request: user: "system:ovn-node:k8s-670.dc" is not allowed to set k8s.ovn.org/node-chassis-id on node "k8s-670.dc": k8s.ovn.org/node-chassis-id cannot be changed once set
Expected results:
ovnkube gets a chassis ID
Additional info:
Description of problem:
Node NotReady ovnkube CrashLoopBackOff
ovnkube.go:136] failed to run ovnkube: failed to start node network controller: failed to start default node network controller: failed to set node k8s-670.dc annotations: admission webhook "node.network-node-identity.openshift.io" denied the request: user: "system:ovn-node:k8s-670.dc" is not allowed to set k8s.ovn.org/node-chassis-id on node "k8s-670.dc": k8s.ovn.org/node-chassis-id cannot be changed once set
Version-Release number of selected component (if applicable):
4.16.10
How reproducible:
Sometimes
Steps to Reproduce:
1. deploy nmstate br-ex replacement with balance-slb
2. reboot
3. apply new MachineConfig
Actual results:
Node goes NotReady ovnkube CrashLoopBackOff
ovnkube.go:136] failed to run ovnkube: failed to start node network controller: failed to start default node network controller: failed to set node k8s-670.dc annotations: admission webhook "node.network-node-identity.openshift.io" denied the request: user: "system:ovn-node:k8s-670.dc" is not allowed to set k8s.ovn.org/node-chassis-id on node "k8s-670.dc": k8s.ovn.org/node-chassis-id cannot be changed once set
Expected results:
ovnkube gets a chassis ID
Additional info:
Similar to OCPBUGS-28790
Possible workaround:
The error has been workarounded by removing the k8s.ovn.org/node-chassis-id annotation from the node. Then the ovnkube-node Pod could start successfully.
Possible workaround:
The error has been workarounded by removing the k8s.ovn.org/node-chassis-id annotation from the node. Then the ovnkube-node Pod could start successfully.
