Comment 0 for bug 1914291

Revision history for this message
Jerry Sun (jerry-sun-u) wrote :

Brief Description
-----------------
Changing kube-apiserver parameters causes the kube-apiserver to fail to start up again due to missing etcd parameters. The root cause seems to be introduced by the fix to this bug:

https://bugs.launchpad.net/starlingx/+bug/1894870

the etcd parameters introduced seems to be mandatory, but gets lost when changing kube-apiserver parameters. This is due to the kubernetes puppet class having no default for the new etcd parameters, and thus the "undef" defaults gets passed down to the script to change the kube-apiserver parameters.

Severity
--------
Major

Steps to Reproduce
------------------
system service-parameter-add kubernetes kube_apiserver admission_plugins=PodSecurityPolicy
system service-parameter-apply kubernetes

Expected Behavior
------------------
kube apiserver restarts, with the PodSecurityPolicy plugin enabled

Actual Behavior
----------------
kube apiserver fails to restart. Manually starting kube-apiserver on the command line using the same parameters as before changing the service parameters shows the kube-apiserver pods crashing.

Reproducibility
---------------
100% reproducible

System Configuration
--------------------
Multi node system

Branch/Pull Time/Commit
-----------------------
pull on 2021-02-02

Last Pass
---------
never