I had the same problem, which caused the entire cluster creation to fail
since it blocks the installing the network plugin and occm.
The problem is probably inside the generate_certificates function in
make-cert-client.sh / make-cert.sh
The function gets executed 5 times for server, kubelet, admin and proxy
and every time the ca certificate is appended to ca.crt
curl $VERIFY_CA -X GET \
-H "X-Auth-Token: $USER_TOKEN" \
-H "OpenStack-API-Version: container-infra latest" \
$MAGNUM_URL/certificates/$CLUSTER_UUID | python -c 'import sys, json;
print(json.load(sys.stdin)["pem"])' >> $CA_CERT
As a workaround, I just deleted the duplicate certificates inside ca.crt and
restarted the kube-controller-manager. After that, the cluster created
successfully
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1926817
Title:
kube-controller-manager crashes due to 5 duplicate certs in ca.crt
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/magnum/+bug/1926817/+subscriptions
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
