The kube-controller-manager is not used the custom CA bundle required for accessing the C2S AWS API. When the kube-controller-manager tries to fetch the instance, the pod crashes on the resulting error. W0112 17:48:43.474274 1 plugins.go:105] WARNING: aws built-in cloud provider is now deprecated. The AWS provider is deprecated and will be removed in a future release I0112 17:48:43.474561 1 aws.go:1251] Building AWS cloudprovider I0112 17:48:43.474623 1 aws.go:1211] Zone not specified in configuration file; querying AWS metadata service F0112 17:48:43.999923 1 controllermanager.go:259] error building controller context: cloud provider could not be initialized: could not init cloud provider "aws": error finding instance i-06ad0cf0811862648: "error listing AWS instances: \"RequestError: send request failed\\ncaused by: Post \\\"https://ec2.us-iso-east-1.c2s.ic.gov/\\\": x509: certificate signed by unknown authority\""
verified. PASS. version: 4.7.0-0.nightly-2021-01-19-095812
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (Moderate: OpenShift Container Platform 4.7.0 security, bug fix, and enhancement update), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHSA-2020:5633