Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-62089

sriov webhook doesn't reload tls cert when secret changes

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Undefined Undefined
    • None
    • 4.18.z
    • Networking / SR-IOV
    • None
    • Quality / Stability / Reliability
    • False
    • Hide

      None

      Show
      None
    • None
    • None
    • None
    • None
    • None
    • CNF Network Sprint 277
    • 1
    • In Progress
    • Release Note Not Required
    • None
    • None
    • None
    • None
    • None

      Description of problem:

      sriov-operator-webhook and resource-inject-webook don't reload tls cert when the secret changes. As the following log shows, only key's event is captured but tls's event is not.
      
      2025-09-23T02:16:21.815555751Z  INFO    sriov-network-operator-webhook  runtime/asm_amd64.s:1693        start server                                                                                                                                                                                                           2025-09-23T02:17:27.526848339Z  INFO    sriov-network-operator-webhook  cobra@v1.8.0/command.go:987     watcher event   {"event": "CHMOD         \"/etc/tls/tls.key\""}                                                                                                                                                        2025-09-23T02:17:27.526951762Z  INFO    sriov-network-operator-webhook  cobra@v1.8.0/command.go:987     modified file   {"name": "/etc/tls/tls.key"}
      2025-09-23T02:17:27.526991595Z  INFO    sriov-network-operator-webhook  cobra@v1.8.0/command.go:987     watcher event   {"event": "REMOVE        \"/etc/tls/tls.key\""}                                                                                                                                                        2025-09-23T02:17:27.526999249Z  INFO    sriov-network-operator-webhook  cobra@v1.8.0/command.go:987     modified file   {"name": "/etc/tls/tls.key"}                                                                                                                                                                           2025-09-23T02:17:27.527021901Z  INFO    sriov-network-operator-webhook  cobra@v1.8.0/command.go:987     watcher event   {"event": "CHMOD         \"\""}                                                                                                                                                                        2025-09-23T02:17:27.527058394Z  INFO    sriov-network-operator-webhook  cobra@v1.8.0/command.go:987     modified file   {"name": ""}                                                                                                                                                                                           2025-09-23T02:17:27.527082903Z  INFO    sriov-network-operator-webhook  cobra@v1.8.0/command.go:987     watcher event   {"event": "REMOVE        \"\""}                                                                                                                                                                        2025-09-23T02:17:27.5270905Z    INFO    sriov-network-operator-webhook  cobra@v1.8.0/command.go:987     modified file   {"name": ""}    

      Version-Release number of selected component (if applicable):

      4.18

      How reproducible:

      race condition, 50%

      Steps to Reproduce:

          1. https://github.com/k8snetworkplumbingwg/sriov-network-operator/issues/945   

      Actual results:

          

      Expected results:

          

      Additional info:

          

              apanatto@redhat.com Andrea Panattoni
              rhn-support-cchen Chen Chen
              None
              None
              Zhiqiang Fang Zhiqiang Fang
              None
              Votes:
              0 Vote for this issue
              Watchers:
              6 Start watching this issue

                Created:
                Updated: