Bug 1815010

Summary:	RHEL scaleup fails with error "Failed to approve node CSR"
Product:	OpenShift Container Platform	Reporter:	Yang Yang <yanyang>
Component:	Node	Assignee:	Ryan Phillips <rphillips>
Status:	CLOSED DUPLICATE	QA Contact:	Sunil Choudhary <schoudha>
Severity:	high	Docs Contact:
Priority:	high
Version:	4.5	CC:	aos-bugs, gpei, jokerman, rphillips, rteague, sdodson, wsun
Target Milestone:	---	Keywords:	Regression
Target Release:	4.5.0
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:	1812787	Environment:
Last Closed:	2020-05-13 12:08:33 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	1812787

Comment 2 Scott Dodson 2020-03-30 12:31:37 UTC

This is happening in vSphere UPI, OSP UPI, and BYOR cases. Essentially any place that CSR approval isn't managed by a controller which can ensure signing happens immediately. This is a change in behavior of the kubelet so moving this to node. The blocked bug https://bugzilla.redhat.com/show_bug.cgi?id=1812787 has more discussion and history.

We may still pursue the ansible changes because it's good defensive code but it shouldn't be necessary and it would only address the BYOR case not vSphere or OSP.

Comment 8 Yang Yang 2020-05-13 08:56:42 UTC

Does it dupe with Bug 1817382 - CSI volume plugin crashes when waiting for CSINode annotation. If yes, could you please help close it as a duplicate?

Removing testblocker keyword since RHEL scaleup works on GCP/Baremetal.

Comment 9 Scott Dodson 2020-05-13 12:08:33 UTC

Yes, I think that's correct to dupe with that bug.

*** This bug has been marked as a duplicate of bug 1817382 ***