Uploaded image for project: 'OpenShift Service Mesh'
  1. OpenShift Service Mesh
  2. OSSM-6900

Certificates errors when creating an SMCP named 'default'

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Minor Minor
    • None
    • OSSM 2.5.4
    • Customer Impact
    • None
    • False
    • None
    • False

      in 1.16 was solved the issue that cause the error in the SMCP but there are still the same error in others compoenents when we try to install them when a new SMCP with default value is being created

      The Issue and PR upstream are this:

      kubectl get smcp -n istio-system
      NAME      READY   STATUS           PROFILES      VERSION   AGE
      default   3/9     PausingInstall   ["default"]             15s
      
      From the describe:
      Events:
        Type    Reason          Age                From                                Message
        ----    ------          ----               ----                                -------
        Normal  Installing      78s                servicemeshcontrolplane-controller  Installing mesh generation 1
        Normal  PausingInstall  72s (x2 over 72s)  servicemeshcontrolplane-controller  Paused until the following components become ready: [prometheus]
      
      kubectl get deployments -n istio-system
      NAME             READY   UP-TO-DATE   AVAILABLE   AGE
      istiod-default   1/1     1            1           107s
      prometheus       0/1     0            0           104s
      
      Error message in Prometheus:
            message: 'Internal error occurred: failed calling webhook "sidecar-injector.istio.io": failed to call webhook: Post "https://istiod-default.istio-system.svc:443/inject?timeout=10s": tls: failed to verify certificate: x509: certificate is valid for istiod.istio-system.svc, istiod-remote.istio-system.svc, istio-pilot.istio-system.svc, not istiod-default.istio-system.svc'
      

      This ticket will address the failures in the rest of the components because istiod is deployed correclty

            Unassigned Unassigned
            frherrer@redhat.com Francisco Herrera Lira
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated: