Description of problem: The must-gather should include the admission configuration for the KAS, that will help us debugging hooks which are misconfigured. Version-Release number of selected component (if applicable): How reproducible: Steps to Reproduce: 1. 2. 3. Actual results: Expected results: Additional info:
A refresh OCP cluster with build 4.5.0-0.nightly-2020-05-24-223848 without any mutatingwebhookconfigurations, so we need to add one, see below, $ cat mutating-admission.yaml apiVersion: admissionregistration.k8s.io/v1 kind: MutatingWebhookConfiguration metadata: name: demo-webhook webhooks: - admissionReviewVersions: - v1beta1 clientConfig: caBundle: <$BUNDERkey> service: name: webhook-server namespace: webhook-demo path: /mutate failurePolicy: Ignore matchPolicy: Exact name: webhook-server.webhook-demo.svc namespaceSelector: {} objectSelector: {} rules: - apiGroups: - k8s.cni.cncf.io apiVersions: - v1 operations: - CREATE - UPDATE resources: - network-attachment-definitions scope: '*' sideEffects: NoneOnDryRun timeoutSeconds: 30 $ oc create -f mutating-admission.yaml $ oc get mutatingwebhookconfigurations.admissionregistration.k8s.io NAME WEBHOOKS AGE demo-webhook 1 70s $ oc adm must-gather $ ls admissionregistration.k8s.io/* admissionregistration.k8s.io/mutatingwebhookconfigurations: demo-webhook.yaml admissionregistration.k8s.io/validatingwebhookconfigurations: autoscaling.openshift.io.yaml multus.openshift.io.yaml The expected admissionregistration has been gathered, move the bug to verified.
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2020:2409