-
Bug
-
Resolution: Unresolved
-
Normal
-
None
-
4.21
bootstrap is starting more than 1m after the kube-apiserver container starts and the KAS container times out after 1m trying to apply some initial resources that rely on bootstrapping.
status: containerStatuses: - name: bootstrap ready: true resources: requests: cpu: 10m memory: 10Mi restartCount: 0 started: true state: running: startedAt: "2025-10-03T11:17:34Z" ... - lastState: terminated: containerID: cri-o://587cd22fed9150e57164b8186e52a4784fb6c17abb829963f1ee4956220d8047 exitCode: 255 finishedAt: "2025-10-03T11:17:28Z" message: |- ... E1003 11:17:28.699307 1 storage_rbac.go:329] "Unhandled Error" err="unable to reconcile rolebinding.rbac.authorization.k8s.io/system:controller:token-cleaner in kube-system: rolebindings.rbac.authorization.k8s.io \"system:controller:token-cleaner\" is forbidden: could not list rolebinding restrictions: the server could not find the requested resource (get rolebindingrestrictions.authorization.openshift.io)" logger="UnhandledError" reason: Error startedAt: "2025-10-03T11:16:56Z" name: kube-apiserver ready: true ... restartCount: 1 started: true state: running: startedAt: "2025-10-03T11:17:55Z"