Description of problem: The service-serving-cert-signer is making over 30,000 requests within the span of 2 hours (since bringing up a cluster using the installer). For comparison, the apiserver performs 24,000 requests within the same time period.
Hi Juan, try running your metrics with docker.io/mrogers950/origin-service-serving-cert-signer:limittest ? This is an image built with https://github.com/openshift/service-serving-cert-signer/pull/37. We should see a reduction in the amount of API requests over time.
I think we had couple of rounds of reduction on request-load. Is this still an active issue? Can this be closed now?
Yes, the operator no longer continually sync loops, which was the root cause of our constant API hammering.
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2019:0758