Bug 2090929 - [etcd] cluster-backup.sh script has a conflict to use the '/etc/kubernetes/static-pod-certs' folder if a custom API certificate is defined
Summary: [etcd] cluster-backup.sh script has a conflict to use the '/etc/kubernetes/st...
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: OpenShift Container Platform
Classification: Red Hat
Component: Etcd
Version: 4.11
Hardware: Unspecified
OS: Unspecified
high
high
Target Milestone: ---
: 4.11.0
Assignee: Vincent Lours
QA Contact: ge liu
URL:
Whiteboard:
Depends On:
Blocks: 2095114
TreeView+ depends on / blocked
 
Reported: 2022-05-27 01:04 UTC by Vincent Lours
Modified: 2022-08-10 11:15 UTC (History)
2 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2022-08-10 11:14:36 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Github openshift cluster-etcd-operator pull 845 0 None open Bug 2090929: cluster-backup.sh script has a conflict to use the '/etc/kubernetes/static-pod-certs' folder if a custom AP... 2022-06-02 14:04:42 UTC
Red Hat Product Errata RHSA-2022:5069 0 None None None 2022-08-10 11:15:00 UTC

Description Vincent Lours 2022-05-27 01:04:32 UTC
Description of problem:
the cluster-backup.sh script has a conflict to use the '/etc/kubernetes/static-pod-certs' folder if a custom API certificate is defined 

Version-Release number of selected component (if applicable):
From the current GitHub repo, this issue seems to impact all current versions.

How reproducible:
Easily

Steps to Reproduce:
1. Define a custom API certificate in the kube-apiserver config (oc edit apiserver cluste)
2. Wait for the certificate to be deployed.
3. Then running the `cluster-backup.sh` will fail as the folder **/etc/kubernetes/static-pod-certs** is already created.

Actual results:
the `etcdctl snapshot save` command failed with the error message:
~~~
  Error: open /etc/kubernetes/static-pod-certs/secrets/etcd-all-certs/etcd-peer-<nodename>.crt: no such file or directory
~~~
Expected results:
Backup to be successful.


Additional info:

Comment 14 errata-xmlrpc 2022-08-10 11:14:36 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Important: OpenShift Container Platform 4.11.0 bug fix and security update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2022:5069


Note You need to log in before you can comment on or make changes to this bug.