Bug 1989748 - kube-apiserver-operator crashes on dual-stack with IPv6 as primary subnet
Summary: kube-apiserver-operator crashes on dual-stack with IPv6 as primary subnet
Keywords:
Status: CLOSED DUPLICATE of bug 1973421
Alias: None
Product: OpenShift Container Platform
Classification: Red Hat
Component: kube-apiserver
Version: 4.8
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
: ---
Assignee: Antonio Ojea
QA Contact: Ke Wang
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2021-08-03 20:53 UTC by Mat Kowalski
Modified: 2021-08-09 06:56 UTC (History)
3 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2021-08-04 09:10:07 UTC
Target Upstream Version:
Embargoed:
mko: needinfo-


Attachments (Terms of Use)
oc cluster-info dump (71.31 KB, text/plain)
2021-08-03 20:54 UTC, Mat Kowalski
no flags Details
kube-apiserver-operator logs (59.61 KB, text/plain)
2021-08-03 20:55 UTC, Mat Kowalski
no flags Details
install-config.yaml (1.34 KB, text/plain)
2021-08-03 20:56 UTC, Mat Kowalski
no flags Details


Links
System ID Private Priority Status Summary Last Updated
Red Hat Issue Tracker MGMT-7217 0 None None None 2021-08-03 21:04:31 UTC

Description Mat Kowalski 2021-08-03 20:53:52 UTC
When installing an OCP 4.8.3 with Baremetal IPI using dual-stack networking with IPv6 subnet listed as a primary one, the kube-apiserver-operator crashes when loading extension-apiserver-authentication.

Part of the error (with full in the attachment)

```
W0803 13:22:56.547398       1 builder.go:209] unable to get owner reference (falling back to namespace): Get "https://[fd02::1]:443/api/v1/namespaces/openshift-kube-apiserver-operator/pods/kube-apiserver-operator-7d964c68b7-69srd": dial tcp [fd02::1]:443: connect: connection refused
[...]
F0803 13:23:26.822913       1 cmd.go:129] unable to load configmap based request-header-client-ca-file: Get "https://[fd02::1]:443/api/v1/namespaces/kube-system/configmaps/extension-apiserver-authentication": dial tcp [fd02::1]:443: connect: connection refused
```

The following are attached
* kube-apiserver-operator logs
* oc cluster-info dump
* install-config.yaml

Comment 1 Mat Kowalski 2021-08-03 20:54:38 UTC
Created attachment 1810618 [details]
oc cluster-info dump

Comment 2 Mat Kowalski 2021-08-03 20:55:29 UTC
Created attachment 1810619 [details]
kube-apiserver-operator logs

Comment 3 Mat Kowalski 2021-08-03 20:56:05 UTC
Created attachment 1810621 [details]
install-config.yaml

Comment 4 Stefan Schimanski 2021-08-03 21:09:08 UTC
Provide kube-apiserver logs. From your operator logs I figure that you are able to talk to the API. Please run must-gather, upload and link here. Otherwise, we cannot triage this.

Comment 5 Antonio Ojea 2021-08-04 09:10:07 UTC
dual stack with IPv6 primary is not supported

*** This bug has been marked as a duplicate of bug 1973421 ***


Note You need to log in before you can comment on or make changes to this bug.