Bug 1749645

Summary: Operation cannot be fulfilled on configmaps "trusted-ca-bundle" in openshift-apiserver namespaces
Product: OpenShift Container Platform Reporter: zhaozhanqi <zzhao>
Component: NetworkingAssignee: Jacob Tanenbaum <jtanenba>
Networking sub component: openshift-sdn QA Contact: zhaozhanqi <zzhao>
Status: CLOSED ERRATA Docs Contact:
Severity: medium    
Priority: high CC: bbennett
Version: 4.2.0   
Target Milestone: ---   
Target Release: 4.2.0   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2019-10-16 06:40:35 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description zhaozhanqi 2019-09-06 06:23:37 UTC
Description of problem:
From the CNO logs, saw error: 
oc logs network-operator-7f7db68f8f-hbp7r -n openshift-network-operator | grep "Operation cannot be fulfilled on"

2019/09/06 05:04:09 Operation cannot be fulfilled on configmaps "trusted-ca-bundle": StorageError: invalid object, Code: 4, Key: /kubernetes.io/configmaps/openshift-apiserver/trusted-ca-bundle, ResourceVersion: 0, AdditionalErrorMsg: Precondition failed: UID in precondition: c28231d0-d063-11e9-b05a-0050568bce55, UID in object meta: 
2019/09/06 05:25:40 Operation cannot be fulfilled on configmaps "trusted-ca-bundle": StorageError: invalid object, Code: 4, Key: /kubernetes.io/configmaps/openshift-apiserver/trusted-ca-bundle, ResourceVersion: 0, AdditionalErrorMsg: Precondition failed: UID in precondition: c3a8742b-d066-11e9-b05a-0050568bce55, UID in object meta:

and many 

2019/09/06 05:32:16 Reconciling configmap from  trusted-ca-bundle/openshift-apiserver
2019/09/06 05:32:19 Reconciling configmap from  trusted-ca-bundle/openshift-apiserver
2019/09/06 05:32:19 Reconciling configmap from  trusted-ca-bundle/openshift-apiserver
2019/09/06 05:32:22 Reconciling configmap from  trusted-ca-bundle/openshift-apiserver
2019/09/06 05:32:22 Reconciling configmap from  trusted-ca-bundle/openshift-apiserver
2019/09/06 05:32:25 Reconciling configmap from  trusted-ca-bundle/openshift-apiserver
2019/09/06 05:32:25 Reconciling configmap from  trusted-ca-bundle/openshift-apiserver
2019/09/06 05:32:27 Reconciling configmap from  trusted-ca-bundle/openshift-apiserver
2019/09/06 05:32:27 Reconciling configmap from  trusted-ca-bundle/openshift-apiserver
2019/09/06 05:32:30 Reconciling configmap from  trusted-ca-bundle/openshift-apiserver
2019/09/06 05:32:30 Reconciling configmap from  trusted-ca-bundle/openshift-apiserver



Version-Release number of selected component (if applicable):
4.2.0-0.nightly-2019-09-05-234433

How reproducible:
always

Steps to Reproduce:
1. Check the CNO pod logs
2. check the configmap in openshift-apiserver
3.

Actual results:

no that configmap in openshift-apiserver

# oc get cm -n openshift-apiserver
NAME                   DATA   AGE
aggregator-client-ca   1      3h27m
client-ca              1      3h27m
config                 3      3h27m
etcd-serving-ca        1      3h27m
# 


Expected results:


Additional info:

Comment 3 zhaozhanqi 2019-09-11 09:20:35 UTC
Check the CNO logs, no there error . Verified this bug on 4.2.0-0.nightly-2019-09-10-181551

Comment 4 errata-xmlrpc 2019-10-16 06:40:35 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2019:2922