Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-59839

Enabling Gateway API causes 'unknown field "spec.values.global.trustBundleName"' errors

XMLWordPrintable

    • Quality / Stability / Reliability
    • False
    • Hide

      None

      Show
      None
    • 1
    • Moderate
    • None
    • None
    • Rejected
    • NI&D Sprint 274
    • 1
    • In Progress
    • Release Note Not Required
    • N/A
    • None
    • None
    • None
    • None

      Description of problem

      Enabling Gateway API causes cluster-ingress-operator's gatewayclass controller to log `unknown field "spec.values.global.trustBundleName"` errors and reconcile repeatedly.

      Version-Release number of selected component (if applicable)

      4.20.

      How reproducible

      100%.

      Steps to Reproduce

      1. Create a gatewayclass with the "openshift.io/gateway-controller/v1" controller name in order to cause cluster-ingress-operator to install OSSM and create an Istio CR.
      2. Check cluster-ingress-operator's logs.

      Actual results

      The operator repeatedly logs the following:

      2025-07-21T20:43:46.190Z	INFO	operator.init.KubeAPIWarningLogger	rest/warnings.go:144	unknown field "spec.values.global.trustBundleName"
      2025-07-21T20:43:46.191Z	INFO	operator.gatewayclass_controller	gatewayclass/istio.go:50	updated istio	{"namespace": "", "name": "openshift-gateway", "diff": "  v1.IstioSpec{\n  \t... // 2 identical fields\n  \tProfile:   \"\",\n  \tNamespace: \"openshift-ingress\",\n  \tValues: &v1.Values{\n  \t\tGlobal: &v1.GlobalConfig{\n  \t\t\t... // 40 identical fields\n  \t\t\tIpFamilyPolicy:  nil,\n  \t\t\tWaypoint:        nil,\n- \t\t\tTrustBundleName: nil,\n+ \t\t\tTrustBundleName: &\"openshift-gw-ca-root-cert\",\n  \t\t},\n  \t\tPilot:     &{Enabled: &true, Env: {\"ENABLE_GATEWAY_API_MANUAL_DEPLOYMENT\": \"false\", \"PILOT_ENABLE_ALPHA_GATEWAY_API\": \"false\", \"PILOT_ENABLE_GATEWAY_API\": \"true\", \"PILOT_ENABLE_GATEWAY_API_CA_CERT_ONLY\": \"true\", ...}, PodAnnotations: {\"target.workload.openshift.io/management\": `{\"effect\": \"PreferredDuringScheduling\"}`}, Cni: &{Enabled: &false}, ...},\n  \t\tTelemetry: nil,\n  \t\t... // 10 identical fields\n  \t},\n  }\n"}
      

      Expected results

      The operator should not log this error and should not repeatedly reconcile the Istio CR.

      Additional info

      This issue was caused by https://github.com/openshift/cluster-ingress-operator/pull/1227/commits/41d7addc3975ea0ca12ada2c368ef58311298921.

              mmasters1@redhat.com Miciah Masters
              mmasters1@redhat.com Miciah Masters
              None
              None
              Hongan Li Hongan Li
              None
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

                Created:
                Updated: