Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-7606

In namespace openshift-kube-apiserver there are around 69 secrets copy maintained with name "encryption-config"

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Not a Bug
    • Icon: Critical Critical
    • None
    • 4.11
    • kube-apiserver
    • Moderate
    • No
    • Rejected
    • False
    • Hide

      None

      Show
      None
    • Customer Escalated

      Description of problem:

      In namespace openshift-kube-apiserver there are around 69 secrets copy maintained with name "encryption-config". 
~~~
$ oc get secrets  |grep -i encryption-config | wc -l
69
~~~

If i check yaml of any old secret then found it's having the finalizers - deletion protection$ omc get secret encryption-config-14 -o yaml
  deletionGracePeriodSeconds: 0
  deletionTimestamp: "2023-01-13T20:09:38Z"
  finalizers:
  - encryption.apiserver.operator.openshift.io/deletion-protection

       

      Version-Release number of selected component (if applicable):

       

      How reproducible:

       

      Steps to Reproduce:

      1.
2.
3.

      Actual results:

       

      Expected results:

       

      Additional info:

      Slack discussion - https://redhat-internal.slack.com/archives/CB48XQ4KZ/p1676050606623079

       

            dgrisonn@redhat.com Damien Grisonnet
            rhn-support-bshaw Bikash Shaw
            Ke Wang Ke Wang
            Votes:
            5 Vote for this issue
            Watchers:
            17 Start watching this issue

              Created:
              Updated:
              Resolved: