Authentication operator degraded after RHOCP 4.x installation due to OAuthRouteCheckEndpointAccessibleControllerDegraded

Solution Verified - Updated -

Issue

  • Authentication and console operators are in degraded state:

    NAME                                      VERSION  AVAILABLE  PROGRESSING  DEGRADED  SINCE
    authentication                                     False      True         True      2d
    console                                   4.6.51   False      True         True      1m51s
    
  • Below event is streaming in openshift-authentication-operator project repetitively:

    1m58s      Normal   OperatorStatusChanged       deployment/authentication-operator              Status for clusteroperator/authentication changed: Degraded message changed from "OAuthRouteCheckEndpointAccessibleControllerDegraded: Get \"https://oauth-openshift.apps.example.com/healthz\": context deadline exceeded (Client.Timeout exceeded while awaiting headers)\nOAuthServerDeploymentDegraded: Unable to get \"openshift-browser-client\" bootstrapped OAuth client: the server is currently unable to handle the request (get oauthclients.oauth.openshift.io openshift-browser-client)" to "OAuthRouteCheckEndpointAccessibleControllerDegraded: Get \"https://oauth-openshift.apps.example.com/healthz\": dial tcp 10.x.x.x:443: i/o timeout (Client.Timeout exceeded while awaiting headers)\nOAuthServerDeploymentDegraded: Unable to get \"openshift-browser-client\" bootstrapped OAuth client: the server is currently unable to handle the request (get oauthclients.oauth.openshift.io openshift-browser-client)"
    
  • Authentication-operator pod is streaming below logs:

    2022-07-14T14:38:05.077097567Z E0714 14:38:05.077039       1 base_controller.go:250] "OAuthRouteCheckEndpointAccessibleController" controller failed to sync "key", err: Get "https://oauth-openshift.apps.example.com/healthz": context deadline exceeded (Client.Timeout exceeded while awaiting headers)
    2022-07-14T14:38:05.820489757Z I0714 14:38:05.820430       1 request.go:645] Throttling request took 1.193994482s, request: GET:https://10.0.0.1:443/api/v1/namespaces/openshift-oauth-apiserver/services/api
    2022-07-14T14:38:10.077629588Z E0714 14:38:10.077576       1 base_controller.go:250] "OAuthRouteCheckEndpointAccessibleController" controller failed to sync "key", err: Get "https://oauth-openshift.apps.example.com/healthz": context deadline exceeded (Client.Timeout exceeded while awaiting headers)
    

Environment

  • Red Hat OpenShift Container Platform (RHOCP)
    • 4.x

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content