Bug 2042655 - [IPI on Alibabacloud] cluster becomes unusable if there is only one kube-apiserver pod running
Summary: [IPI on Alibabacloud] cluster becomes unusable if there is only one kube-apis...
Alias: None
Product: OpenShift Container Platform
Classification: Red Hat
Component: Installer
Version: 4.10
Hardware: Unspecified
OS: Unspecified
Target Milestone: ---
: 4.10.0
Assignee: Matthew Staebler
QA Contact: Jianli Wei
Depends On:
TreeView+ depends on / blocked
Reported: 2022-01-19 20:48 UTC by Matthew Staebler
Modified: 2022-03-10 16:41 UTC (History)
0 users

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Last Closed: 2022-03-10 16:40:58 UTC
Target Upstream Version:

Attachments (Terms of Use)

System ID Private Priority Status Summary Last Updated
Github openshift installer pull 5550 0 None open Bug 2042655: revert delay of bootstrap control plane teardown for alibaba 2022-01-20 01:02:56 UTC
Github openshift machine-config-operator pull 2919 0 None open Bug 2042655: Alibaba hairpin 2022-01-19 22:37:54 UTC
Red Hat Product Errata RHSA-2022:0056 0 None None None 2022-03-10 16:41:09 UTC

Description Matthew Staebler 2022-01-19 20:48:06 UTC
This is split off from https://bugzilla.redhat.com/show_bug.cgi?id=2035757 to cover issues post-install.

Due to limitations in the load balancer on alibaba cloud, a request made from a control plane host to api-int will fail if the backend server handling that request is the same host. If there is ever a time when there is only one kube-apiserver pod running, then the cluster will become unusable. The node running that kube-apiserver pod will not be able to send heartbeats to the api server. The token for the node will be revoked. The kube-apiserver pod will devolve into a state where it cannot handle requests. At that point, there is no functioning api server, and there is no resolution without manual intervention by the cluster administrator.

Comment 6 errata-xmlrpc 2022-03-10 16:40:58 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Moderate: OpenShift Container Platform 4.10.3 security update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.


Note You need to log in before you can comment on or make changes to this bug.