-
Bug
-
Resolution: Unresolved
-
Normal
-
None
-
4.21
bootstrap is starting more than 1m after the kube-apiserver container starts and the KAS container times out after 1m trying to apply some initial resources that rely on bootstrapping.
status:
containerStatuses:
- name: bootstrap
ready: true
resources:
requests:
cpu: 10m
memory: 10Mi
restartCount: 0
started: true
state:
running:
startedAt: "2025-10-03T11:17:34Z"
...
- lastState:
terminated:
containerID: cri-o://587cd22fed9150e57164b8186e52a4784fb6c17abb829963f1ee4956220d8047
exitCode: 255
finishedAt: "2025-10-03T11:17:28Z"
message: |-
...
E1003 11:17:28.699307 1 storage_rbac.go:329] "Unhandled Error" err="unable to reconcile rolebinding.rbac.authorization.k8s.io/system:controller:token-cleaner in kube-system: rolebindings.rbac.authorization.k8s.io \"system:controller:token-cleaner\" is forbidden: could not list rolebinding restrictions: the server could not find the requested resource (get rolebindingrestrictions.authorization.openshift.io)" logger="UnhandledError"
reason: Error
startedAt: "2025-10-03T11:16:56Z"
name: kube-apiserver
ready: true
...
restartCount: 1
started: true
state:
running:
startedAt: "2025-10-03T11:17:55Z"