Bug 1915500

Summary:	[aws c2s] kube-controller-manager crash loops trying to fetch the AWS instance
Product:	OpenShift Container Platform	Reporter:	Matthew Staebler <mstaeble>
Component:	Installer	Assignee:	Matthew Staebler <mstaeble>
Installer sub component:	openshift-installer	QA Contact:	Yunfei Jiang <yunjiang>
Status:	CLOSED ERRATA	Docs Contact:
Severity:	urgent
Priority:	urgent	CC:	yunjiang
Version:	4.7	Keywords:	TestBlocker
Target Milestone:	---
Target Release:	4.7.0
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	No Doc Update
Doc Text:	This is a bug in new functionality added to 4.7.	Story Points:	---
Clone Of:		Environment:
Last Closed:	2021-02-24 15:52:28 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Matthew Staebler 2021-01-12 18:26:18 UTC

The kube-controller-manager is not used the custom CA bundle required for accessing the C2S AWS API. When the kube-controller-manager tries to fetch the instance, the pod crashes on the resulting error.

W0112 17:48:43.474274       1 plugins.go:105] WARNING: aws built-in cloud provider is now deprecated. The AWS provider is deprecated and will be removed in a future release
I0112 17:48:43.474561       1 aws.go:1251] Building AWS cloudprovider
I0112 17:48:43.474623       1 aws.go:1211] Zone not specified in configuration file; querying AWS metadata service
F0112 17:48:43.999923       1 controllermanager.go:259] error building controller context: cloud provider could not be initialized: could not init cloud provider "aws": error finding instance i-06ad0cf0811862648: "error listing AWS instances: \"RequestError: send request failed\\ncaused by: Post \\\"https://ec2.us-iso-east-1.c2s.ic.gov/\\\": x509: certificate signed by unknown authority\""

Comment 7 Yunfei Jiang 2021-01-20 13:20:54 UTC

verified. PASS.
version: 4.7.0-0.nightly-2021-01-19-095812

Comment 10 errata-xmlrpc 2021-02-24 15:52:28 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Moderate: OpenShift Container Platform 4.7.0 security, bug fix, and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2020:5633