search

crc-org / snc

Single Node Cluster creation scripts for OpenShift 4.x as used by CodeReady Containers
https://crc.dev
Apache License 2.0
100 stars 50 forks source link

4.17.X Cert rotation mechanism not working #943

Closed adrianriobo closed 1 month ago

adrianriobo commented 1 month ago

When running test with the 4.17.0-ec.1 bundle and the cert expiration date is reached the cert rotation mechanism is not being executed and the crc start command ends up failing:

DEBU retry loop: attempt 204                      
DEBU Running SSH command: timeout 5s oc get nodes --context admin --cluster crc --kubeconfig /opt/kubeconfig 
DEBU SSH command results: err: Process exited with status 1, output:  
DEBU E0711 09:27:24.171405   10556 memcache.go:265] couldn't get current server API group list: Get "https://api.crc.testing:6443/api?timeout=32s": tls: failed to verify certificate: x509: certificate has expired or is not yet valid: current time 2024-07-11T09:27:24Z is after 2024-07-10T05:27:06Z
E0711 09:27:24.174218   10556 memcache.go:265] couldn't get current server API group list: Get "https://api.crc.testing:6443/api?timeout=32s": tls: failed to verify certificate: x509: certificate has expired or is not yet valid: current time 2024-07-11T09:27:24Z is after 2024-07-10T05:27:06Z
E0711 09:27:24.176945   10556 memcache.go:265] couldn't get current server API group list: Get "https://api.crc.testing:6443/api?timeout=32s": tls: failed to verify certificate: x509: certificate has expired or is not yet valid: current time 2024-07-11T09:27:24Z is after 2024-07-10T05:27:06Z
E0711 09:27:24.179742   10556 memcache.go:265] couldn't get current server API group list: Get "https://api.crc.testing:6443/api?timeout=32s": tls: failed to verify certificate: x509: certificate has expired or is not yet valid: current time 2024-07-11T09:27:24Z is after 2024-07-10T05:27:06Z
E0711 09:27:24.182477   10556 memcache.go:265] couldn't get current server API group list: Get "https://api.crc.testing:6443/api?timeout=32s": tls: failed to verify certificate: x509: certificate has expired or is not yet valid: current time 2024-07-11T09:27:24Z is after 2024-07-10T05:27:06Z
Unable to connect to the server: tls: failed to verify certificate: x509: certificate has expired or is not yet valid: current time 2024-07-11T09:27:24Z is after 2024-07-10T05:27:06Z 
DEBU error: Temporary error: ssh command error:
command : timeout 5s oc get nodes --context admin --cluster crc --kubeconfig /opt/kubeconfig
err     : Process exited with status 1
 - sleeping 1s 
DEBU retry loop: attempt 205                      
DEBU Running SSH command: timeout 5s oc get nodes --context admin --cluster crc --kubeconfig /opt/kubeconfig 
DEBU SSH command results: err: Process exited with status 1, output:  
DEBU E0711 09:27:25.291385   10580 memcache.go:265] couldn't get current server API group list: Get "https://api.crc.testing:6443/api?timeout=32s": tls: failed to verify certificate: x509: certificate has expired or is not yet valid: current time 2024-07-11T09:27:25Z is after 2024-07-10T05:27:06Z
E0711 09:27:25.294365   10580 memcache.go:265] couldn't get current server API group list: Get "https://api.crc.testing:6443/api?timeout=32s": tls: failed to verify certificate: x509: certificate has expired or is not yet valid: current time 2024-07-11T09:27:25Z is after 2024-07-10T05:27:06Z
E0711 09:27:25.297064   10580 memcache.go:265] couldn't get current server API group list: Get "https://api.crc.testing:6443/api?timeout=32s": tls: failed to verify certificate: x509: certificate has expired or is not yet valid: current time 2024-07-11T09:27:25Z is after 2024-07-10T05:27:06Z
E0711 09:27:25.300306   10580 memcache.go:265] couldn't get current server API group list: Get "https://api.crc.testing:6443/api?timeout=32s": tls: failed to verify certificate: x509: certificate has expired or is not yet valid: current time 2024-07-11T09:27:25Z is after 2024-07-10T05:27:06Z
E0711 09:27:25.303299   10580 memcache.go:265] couldn't get current server API group list: Get "https://api.crc.testing:6443/api?timeout=32s": tls: failed to verify certificate: x509: certificate has expired or is not yet valid: current time 2024-07-11T09:27:25Z is after 2024-07-10T05:27:06Z
Unable to connect to the server: tls: failed to verify certificate: x509: certificate has expired or is not yet valid: current time 2024-07-11T09:27:25Z is after 2024-07-10T05:27:06Z 
DEBU error: Temporary error: ssh command error:
command : timeout 5s oc get nodes --context admin --cluster crc --kubeconfig /opt/kubeconfig
err     : Process exited with status 1
 - sleeping 1s 
DEBU RetryAfter timeout after 206 tries           
Error waiting for apiserver: Temporary error: ssh command error:
command : timeout 5s oc get nodes --context admin --cluster crc --kubeconfig /opt/kubeconfig
err     : Process exited with status 1
 (x2)
Temporary error: ssh command error:
command : timeout 5s oc get nodes --context admin --cluster crc --kubeconfig /opt/kubeconfig
err     : Process exited with status 124

Temporary error: ssh command error:
command : timeout 5s oc get nodes --context admin --cluster crc --kubeconfig /opt/kubeconfig
err     : Process exited with status 1
 (x203)
praveenkumar commented 1 month ago

https://github.com/crc-org/crc/pull/4277 should fix it.

praveenkumar commented 1 month ago

This is fixed.