1959954 – openshift-cloud-credential-operator CSRs never get approved, certificate request was not signed

Bug 1959954 - openshift-cloud-credential-operator CSRs never get approved, certificate request was not signed

Summary: openshift-cloud-credential-operator CSRs never get approved, certificate requ...

Keywords:
Status:	CLOSED DUPLICATE of bug 1958861
Alias:	None
Product:	OpenShift Container Platform
Classification:	Red Hat
Component:	Cloud Credential Operator
Sub Component:
Version:	4.8
Hardware:	Unspecified
OS:	Unspecified
Priority:	unspecified
Severity:	unspecified
Target Milestone:	---
Target Release:	---
Assignee:	Devan Goodwin
QA Contact:	wang lin
Docs Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+	depends on / blocked

Reported:	2021-05-12 17:37 UTC by Paige Rubendall
Modified:	2021-05-12 18:01 UTC (History)
CC List:	2 users (show)
Fixed In Version:
Doc Type:	If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed:	2021-05-12 18:01:14 UTC
Target Upstream Version:
Embargoed:

Attachments	(Terms of Use)

Description Paige Rubendall 2021-05-12 17:37:39 UTC

Description of problem:
CSR's are stuck in pending and never get approved. 

Version-Release number of selected component (if applicable):  4.8.0-0.nightly-2021-05-10-092939


How reproducible: Unsure


Steps to Reproduce:
1. Install  4.8.0-0.nightly-2021-05-10-092939 cluster
2. Keep it up for longer than 24 hours (current cluster is 46 hours old)
3. Pending CSR's present

Actual results:
All CSR's for openshift-cloud-credential-operator are Pending 


Expected results:
All CSR's get approved 


Additional info:
# oc get csr | grep cloud-credential-operator
csr-27r7t   4h27m   kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-2fdhh   5h29m   kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-2qmzq   97m     kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-2zjgm   6h16m   kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-48pgb   23h     kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-4wxn5   20h     kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-4zwwj   5h45m   kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-5bzpw   12h     kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-5k5zr   66m     kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-5qvkz   14h     kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-5r4f5   20h     kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-5rmhh   11h     kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-6qhdj   9h      kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-75sbd   7h2m    kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-76rh4   16h     kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-76vm9   20h     kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-7hxjh   13h     kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-7rzv8   9h      kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-82cpm   3h57m   kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-8c6ck   4h43m   kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-8gz5l   10h     kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-97klw   8h      kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-9f7vt   15h     kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-9kf2s   20m     kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-9p289   16h     kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-9r84k   12h     kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-b98qq   21h     kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-b9dvj   159m    kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-bcv5n   21h     kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-bz492   16h     kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-c8kpp   15h     kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-ccs4n   19h     kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-crnvz   12h     kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-czbg9   24h     kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-d472j   11h     kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-d4cjb   22h     kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-d4sm9   10h     kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-dg4w8   18h     kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-drj2h   8h      kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-fr6fl   5m2s    kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-fr754   16h     kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-g9nrh   6h31m   kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-g9wnx   7h49m   kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-gb9rh   7h18m   kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-gdvgp   3h10m   kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-gkk7k   6h47m   kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-gpbtk   22h     kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-gr4sp   23h     kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-hdcf2   3h41m   kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-hnph5   17h     kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-hptsg   51m     kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-hqj4f   8h      kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-hvx78   113m    kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-jcnm8   9h      kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-jdkfr   4h58m   kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-kppmp   19h     kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-l69wv   9h      kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-lq4ht   5h14m   kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-lwcjb   18h     kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-lxf6r   14h     kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-lzd59   14h     kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-m2b4n   13h     kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-m77xd   7h33m   kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-mgvfs   19h     kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-mqc64   3h26m   kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-p6mhp   144m    kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-pdb26   18h     kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-prmd9   14h     kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-pwvb4   24h     kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-qf2kh   18h     kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-qm42n   21h     kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-qvtd7   175m    kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-r2lc8   82m     kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-r9bs8   8h      kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-rzrmk   128m    kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-sbdhh   17h     kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-sgfdc   11h     kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-sq2l6   15h     kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-ssfsr   6h      kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-svhtc   20h     kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-sxk55   12h     kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-tx565   17h     kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-tzg6h   11h     kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-vknqv   15h     kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-vqwq5   35m     kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-w9wgk   22h     kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-wdjvl   21h     kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-wlbgh   23h     kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-wr94k   10h     kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-x5pfm   10h     kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-xd62h   4h12m   kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-xhrzf   17h     kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-xjd9m   13h     kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-z4vxt   19h     kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending
csr-zhslq   23h     kubernetes.io/kubelet-serving                 system:serviceaccount:openshift-cloud-credential-operator:pod-identity-webhook   Pending


 % oc get pods -n openshift-cloud-credential-operator
NAME                                         READY   STATUS    RESTARTS   AGE
cloud-credential-operator-756c9f5ff6-7jpkh   2/2     Running   0          46h
pod-identity-webhook-5d75f69b47-vnvlz        1/1     Running   0          46h

$ oc logs pod/pod-identity-webhook-5d75f69b47-vnvlz -n openshift-cloud-credential-operator
E0512 16:07:27.426004       1 certificate_manager.go:454] certificate request was not signed: timed out waiting for the condition
E0512 16:22:55.429730       1 certificate_manager.go:454] certificate request was not signed: timed out waiting for the condition
E0512 16:38:23.428061       1 certificate_manager.go:454] certificate request was not signed: timed out waiting for the condition
E0512 16:53:51.427190       1 certificate_manager.go:454] certificate request was not signed: timed out waiting for the condition
E0512 17:09:19.430771       1 certificate_manager.go:454] certificate request was not signed: timed out waiting for the condition

Comment 2 Joel Diaz 2021-05-12 18:01:14 UTC


*** This bug has been marked as a duplicate of bug 1958861 ***

Note You need to log in before you can comment on or make changes to this bug.