Bug 1916688

Summary:	Undeletable configmap kube-root-ca.crt on OCP 4.7
Product:	OpenShift Container Platform	Reporter:	Martin Ocenas <mocenas>
Component:	kube-controller-manager	Assignee:	Maciej Szulik <maszulik>
Status:	CLOSED NOTABUG	QA Contact:	zhou ying <yinzhou>
Severity:	high	Docs Contact:
Priority:	unspecified
Version:	4.7	CC:	aos-bugs, eparis, jokerman, mchoma, mfojtik, mnovak, msimka
Target Milestone:	---	Keywords:	TestBlockerForLayeredProduct
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2021-01-15 15:20:34 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Martin Ocenas 2021-01-15 12:50:22 UTC

Description of problem:
On OCP 4.7, in every new namespace there is automatically created a configmap "kube-root-ca.crt". Also this configmap can't be deleted - when we try to delete it, delete command will succeed, but the configmap is not deleted (or possibly immediately created again).

Version-Release number of selected component (if applicable): 
OCP - 4.7.0-0.nightly-2021-01-10-070949

How reproducible:
always

Steps to Reproduce:
1. Setup cluster
2. oc new-project test
3. oc get configmaps

Actual results:
Configmap "kube-root-ca.crt" is present.

Expected results:
No configmap is present.


Additional info:
We are not certain if this is a bug or some new feature but it breaks our workflow.

Comment 1 Maciej Szulik 2021-01-15 15:20:34 UTC

This is new addition starting from k8s 1.20, see https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.20.md#introducing-rootcaconfigmap