Uploaded image for project: 'OpenShift Request For Enhancement'
  1. OpenShift Request For Enhancement
  2. RFE-6375

ETCD backup need to include "external-loadbalancer-serving-certkey"

XMLWordPrintable

    • Icon: Feature Request Feature Request
    • Resolution: Unresolved
    • Icon: Normal Normal
    • None
    • openshift-4.15
    • etcd
    • None
    • Improvement
    • False
    • None
    • False
    • Not Selected

      1. Proposed title of this feature request:

      ETCD backup not including "external-loadbalancer-serving-certkey".
      One customer encountered the issue of missing the external-load balancer cert and key.
      ~~~
      E0919 07:12:56.374048 16 run.go:74] "command failed" err="failed to load SNI cert and key: missing content for serving cert \"sni-serving-cert::/etc/kubernetes/static-pod-certs/secrets/external-loadbalancer-serving-certkey/tls.crt::/etc/kubernetes/static-pod-certs/secrets/external-loadbalancer-serving-certkey/tls.key\""
      I0919 07:12:56.377964 1 main.go:235] Termination finished with exit code 1
      I0919 07:12:56.377982 1 main.go:188] Deleting termination lock file "/var/log/kube-apiserver/.terminating"
      ~~~
      We tried to retrieve the certificate from etcd-backup but we didn't find it.
      ~~~
      sh-5.1# cd kube-apiserver-pod-18/secrets/
      etcd-client/ localhost-recovery-client-token/ localhost-recovery-serving-certkey/ webhook-authenticator/
      ~~~
      Hence requesting to include the external-loadbalancer-serving-certkey in etcd. backup.

              Unassigned Unassigned
              rhn-support-agawand Asmita Gawand
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated: