Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 1934014

Summary: OPC 4.7 image-registry pod fails on newly installed cluster
Product: OpenShift Container Platform Reporter: Palash Khaire <pkhaire>
Component: service-caAssignee: Standa Laznicka <slaznick>
Status: CLOSED DUPLICATE QA Contact: scheng
Severity: medium Docs Contact:
Priority: medium    
Version: 4.7CC: aos-bugs, mfojtik, obulatov, slaznick, sttts
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: All   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2021-04-16 13:03:10 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Palash Khaire 2021-03-02 09:51:22 UTC 
Description of problem: OPC 4.7 image-registry pod fails on a newly installed cluster


Additional info:


 oc --kubeconfig=./kubeconfig get pods -n openshift-image-registry
NAME                                               READY   STATUS              RESTARTS   AGE
cluster-image-registry-operator-556c8db4bb-gzzf9   1/1     Running             0          7h25m
image-registry-6bc454986f-4qtph                    0/1     ContainerCreating   0          19m
image-registry-c64c6df69-xcbxp                     0/1     ContainerCreating   0          19m

From the events:

~~
13s        Warning  FailedMount        pod/image-registry-c64c6df69-xcbxp    MountVolume.SetUp failed for volume "registry-tls" : secret "image-registry-tls" not found
2m20s      Warning  FailedMount        pod/image-registry-c64c6df69-xcbxp    Unable to attach or mount volumes: unmounted volumes=[registry-tls], unattached volumes=[registry-tls ca-trust-extracted registry-certificates trusted-ca installation-pull-secrets bound-sa-token registry-token-jvb94 registry-storage]: timed out waiting for the condition
6s         Warning  FailedMount        pod/image-registry-c64c6df69-xcbxp    Unable to attach or mount volumes: unmounted volumes=[registry-tls], unattached volumes=[bound-sa-token registry-token-jvb94 registry-storage registry-tls ca-trust-extracted registry-certificates trusted-ca installation-pull-secrets]: timed out waiting for the condition
~~

Sharing more info in private notes.
Comment 2 Oleg Bulatov 2021-03-02 10:19:02 UTC 
service-ca operator doesn't work on this cluster. For some reason it reports Available=True, but its pod isn't ready.
Comment 3 Stefan Schimanski 2021-03-03 10:03:15 UTC 
Please provide a must-gather link. Without this the bug is not actionable and will be eventually closed.
Comment 10 Standa Laznicka 2021-04-16 13:03:10 UTC 

*** This bug has been marked as a duplicate of bug 1929801 ***