isovalent / olm-for-cilium

OpenShift Operator Lifecycle Manager for Cilium
Other
6 stars 5 forks source link

cilium-olm fails to start - missing IP SANs #95

Open eminchen opened 3 months ago

eminchen commented 3 months ago

Installing cilium 1.14.5 on Openshift 4.16, getting error with certificate as per log below. Any suggestions what I need to patch?

oc logs cilium-olm-55bc4bc585-548qh -n cilium Flag --enable-leader-election has been deprecated, use --leader-elect instead. Flag --metrics-addr has been deprecated, use --metrics-bind-address instead 1.7227919898045473e+09 INFO cmd Version {"Go Version": "go1.18.7", "GOOS": "linux", "GOARCH": "amd64", "helm-operator": "v1.22.2", "commit": "da3346113a8a75e11225f586482934000504a60f"} 1.7227919898047438e+09 DEBUG cmd Setting namespace with value in WATCH_NAMESPACE {"Namespace": "cilium"} 1.7227919898047497e+09 INFO cmd Watching single namespace. {"Namespace": "cilium"} 1.7227919898095002e+09 ERROR Failed to get API Group-Resources {"error": "Get \"https://172.30.0.1:443/api?timeout=32s\": x509: cannot validate certificate for 172.30.0.1 because it doesn't contain any IP SANs"} sigs.k8s.io/controller-runtime/pkg/cluster.New /go/pkg/mod/sigs.k8s.io/controller-runtime@v0.12.1/pkg/cluster/cluster.go:160 sigs.k8s.io/controller-runtime/pkg/manager.New /go/pkg/mod/sigs.k8s.io/controller-runtime@v0.12.1/pkg/manager/manager.go:322 github.com/operator-framework/operator-sdk/internal/cmd/helm-operator/run.run /workspace/internal/cmd/helm-operator/run/cmd.go:176 github.com/operator-framework/operator-sdk/internal/cmd/helm-operator/run.NewCmd.func1 /workspace/internal/cmd/helm-operator/run/cmd.go:75 github.com/spf13/cobra.(Command).execute /go/pkg/mod/github.com/spf13/cobra@v1.4.0/command.go:860 github.com/spf13/cobra.(Command).ExecuteC /go/pkg/mod/github.com/spf13/cobra@v1.4.0/command.go:974 github.com/spf13/cobra.(Command).Execute /go/pkg/mod/github.com/spf13/cobra@v1.4.0/command.go:902 main.main /workspace/cmd/helm-operator/main.go:40 runtime.main /usr/local/go/src/runtime/proc.go:250 1.722791989809653e+09 ERROR cmd Failed to create a new manager. {"Namespace": "cilium", "error": "Get \"https://172.30.0.1:443/api?timeout=32s\": x509: cannot validate certificate for 172.30.0.1 because it doesn't contain any IP SANs"} github.com/operator-framework/operator-sdk/internal/cmd/helm-operator/run.NewCmd.func1 /workspace/internal/cmd/helm-operator/run/cmd.go:75 github.com/spf13/cobra.(Command).execute /go/pkg/mod/github.com/spf13/cobra@v1.4.0/command.go:860 github.com/spf13/cobra.(Command).ExecuteC /go/pkg/mod/github.com/spf13/cobra@v1.4.0/command.go:974 github.com/spf13/cobra.(Command).Execute /go/pkg/mod/github.com/spf13/cobra@v1.4.0/command.go:902 main.main /workspace/cmd/helm-operator/main.go:40 runtime.main /usr/local/go/src/runtime/proc.go:250