Uploaded image for project: 'OpenShift Pipelines'
  1. OpenShift Pipelines
  2. SRVKP-8484

Upgrade from 1.19.3 to 1.20 fails due to duplicate CABundle mounts

XMLWordPrintable

    • 1
    • False
    • Hide

      None

      Show
      None
    • False
    • No release notes required since this bug is introduced and fixed by the same version
    • Release Note Not Required
    • Pipelines Sprint Tekshift 36, Pipelines Sprint Tekshift 37

      Description of problem:

      The custom certificates bundle mounting logic in the operator, added as part of SRVKP-8204, does not deduplicate the custom CA volume mounts and volumes causing the new pods to fail validation and the upgrade to fail

      Prerequisites (if any, like setup, operators/versions):

      Steps to Reproduce

      • Deploy OSP v0.19.3
      • Observe that the CA bundle is mounted as the system ca bundle for all components
      • Upgrade to OSP v0.20.0

       

      Actual results:

      • Upgrade fails and the operator logs an error like "Install failed with message: Deployment.apps "tekton-triggers-controller" is invalid: [spec.template.spec.volumes[1].name: Duplicate value: "config-trusted-system-cabundle-volume", ..."

        Expected results:

      • The upgrade succeeds

        Reproducibility (Always/Intermittent/Only Once):

      • Always

        Acceptance criteria: 

      • The upgrade succeeds without manual intervention and the components maintain their custom certificates mounted as the system ca-bundle
         

      Definition of Done:

      • acceptance criteria met
      • unit tests added
      • upgrade path tested by QE

      Build Details:

      Build and details are in this slack thread: https://redhat-internal.slack.com/archives/C03A1MBHN81/p1756186351593389

      Additional info (Such as Logs, Screenshots, etc):

       

       *

              rh-ee-athorp Andrew Thorp
              rh-ee-athorp Andrew Thorp
              Jayesh Garg Jayesh Garg
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Created:
                Updated:
                Resolved: