Description of problem: Message: Control plane pods didn't come up Version-Release number of selected component (if applicable): └──> grep openshift* sosreport-malhamada.02233123-20181017171945/installed-rpms atomic-openshift-3.11.16-1.git.0.b48b8f8.el7.x86_64 Wed Oct 17 14:07:50 2018 atomic-openshift-clients-3.11.16-1.git.0.b48b8f8.el7.x86_64 Wed Oct 17 13:55:05 2018 atomic-openshift-docker-excluder-3.11.16-1.git.0.b48b8f8.el7.noarch Wed Oct 17 13:52:37 2018 atomic-openshift-excluder-3.11.16-1.git.0.b48b8f8.el7.noarch Wed Oct 17 13:53:10 2018 atomic-openshift-hyperkube-3.11.16-1.git.0.b48b8f8.el7.x86_64 Wed Oct 17 13:55:01 2018 atomic-openshift-node-3.11.16-1.git.0.b48b8f8.el7.x86_64 Wed Oct 17 13:55:02 2018 openshift-ansible-3.11.16-1.git.0.4ac6f81.el7.noarch Wed Oct 17 12:45:00 2018 openshift-ansible-docs-3.11.16-1.git.0.4ac6f81.el7.noarch Wed Oct 17 12:45:00 2018 openshift-ansible-playbooks-3.11.16-1.git.0.4ac6f81.el7.noarch Wed Oct 17 12:45:00 2018 openshift-ansible-roles-3.11.16-1.git.0.4ac6f81.el7.noarch Wed Oct 17 12:45:00 2018 How reproducible: Very Steps to Reproduce: 1. Run the installer 2. 3. Actual results: Play: Configure masters Task: Report control plane errors Message: Control plane pods didn't come up Expected results: Additional info:
The controllers pod indicates that it cannot read the LDAP CA. Invalid MasterConfig /etc/origin/master/master-config.yaml oauthConfig.identityProvider[0].provider.ca: Invalid value: "/etc/origin/master/LDAP_ldap_ca.crt": could not read file: stat /etc/origin/master/LDAP_ldap_ca.crt: no such file or directory A workaround would be to copy the LDAP server's certificate authority into place. Vadim, you've worked on similar problems in 3.10, is this still an outstanding problem in 3.11?
The customer has closed the case and it's my understanding the problem has been resolved through updated configuration. You must set openshift_master_ldap_ca_file to the local path of a file to be copied to the target hosts as the LDAP CA or manually ensure that the LDAP CA is copied otherwise.
The needinfo request[s] on this closed bug have been removed as they have been unresolved for 1000 days