cert-mgr resource creation fails after swact on duplex ipv6 system
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
StarlingX |
Fix Released
|
Medium
|
Sabeel Ansari |
Bug Description
Brief Description
-----------------
The cert-manager resource creation fails after swact on wcp_78_79 ipv6 duplex system
Severity
--------
Major
Steps to Reproduce
------------------
1)Create a stepca issuer
[sysadmin@
NAME READY AGE
stepca-issuer True 78s
2)create a certificate request with the following yaml file
apiVersion: cert-manager.
kind: Certificate
metadata:
name: cert-1
spec:
secretName: cert-1
issuerRef:
name: stepca-issuer
kind: ClusterIssuer
organization:
- Windriver
dnsNames:
- cgcs-wildcat-
3)certificate is issued by stepca
4)swact the active controller
5)wait for swact operation is succesful, now delete the stepca_issuer
[sysadmin@
clusterissuer.
6)Now if the user tries to create it again shows the following error on the system
[sysadmin@
Error from server (InternalError): error when creating "stepca_
[sysadmin@
7)Tried the same operation on r430_3_4 ipv6 system and it seems to be working fine
System Configuration
-------
duplex system,
duplex system, wcp_r430_3_4_ipv6 -- passes on this system
Branch/Pull Time/Commit
-------
2020-06-02_20-00-00
Last Pass
---------
Never on wcp_78_79
Timestamp/Logs
--------------
2020-06-
Test Activity
-------------
Automation
Workaround
----------
swact again and perform the same operation
summary: |
- cm resource creation fails after swact on duplex ipv6 system + cert-mgr resource creation fails after swact on duplex ipv6 system |
Changed in starlingx: | |
assignee: | nobody → Sabeel Ansari (sansariwr) |
tags: | added: stx.security |
stx.4.0 / medium priority - issue appears to be seen on one system. Requires further investigation as it's not clear what's different about this system; perhaps a timing issue where the cert-mgr has not recovered after the swact operation (?)