Bug 1820486
| Summary: | [oauth-openshift]fixes configmap "extension-apiserver-authentication" not found | ||
|---|---|---|---|
| Product: | OpenShift Container Platform | Reporter: | Ke Wang <kewang> |
| Component: | apiserver-auth | Assignee: | Stefan Schimanski <sttts> |
| Status: | CLOSED ERRATA | QA Contact: | scheng |
| Severity: | medium | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | 4.5 | CC: | aos-bugs, kewang, lszaszki, mfojtik, xxia |
| Target Milestone: | --- | ||
| Target Release: | 4.5.0 | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | If docs needed, set a value | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | 1813964 | Environment: | |
| Last Closed: | 2020-08-04 18:03:56 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
|
Description
Ke Wang
2020-04-03 08:13:32 UTC
To verified if the log occurred the pod starting up, tried the following, $ oc delete pod oauth-openshift-56d45f4dc6-gf8vb -n openshift-authentication --force --grace-period=0 warning: Immediate deletion does not wait for confirmation that the running resource has been terminated. The resource may continue to run on the cluster indefinitely. pod "oauth-openshift-56d45f4dc6-gf8vb" force deleted $ oc get pods -A | grep openshift-authentication openshift-authentication-operator authentication-operator-8bdb6b997-r5vlp 1/1 Running 0 143m openshift-authentication oauth-openshift-56d45f4dc6-5j4k2 1/1 Running 0 35s openshift-authentication oauth-openshift-56d45f4dc6-jzqhk 1/1 Running 0 142m $ oc logs oauth-openshift-56d45f4dc6-5j4k2 -n openshift-authentication | grep 'configmap "extension-apiserver-authentication" not found' W0403 09:38:58.937025 1 configmap_cafile_content.go:102] unable to load initial CA bundle for: "client-ca::kube-system::extension-apiserver-authentication::client-ca-file" due to: configmap "extension-apiserver-authentication" not found W0403 09:38:58.937638 1 configmap_cafile_content.go:102] unable to load initial CA bundle for: "client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" due to: configmap "extension-apiserver-authentication" not found We can see the above message will be printed at the pod startup. the fix was included in the latest rebase (upstream 1.18) Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (OpenShift Container Platform 4.5 image release advisory), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2020:2409 |