service-ca-operator and cluster-network-operators compete in injecting CA bundles in OpenShift Container Platform 4 when wrongly configured
Issue
service-ca-operatorandcluster-network-operatorscompete in injecting CA bundles in OpenShift Container Platform 4 when wrongly configured.- When annotating a
ConfigMapwithservice.beta.openshift.io/inject-cabundle=trueand adding the labelconfig.openshift.io/inject-trusted-cabundle=trueto the sameConfigMap, theservice-ca-operatorand thecluster-network-operatorare racing each other to apply the desired state which will never be possible.
Environment
- Red Hat OpenShift Container Platform (OCP) 4
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.