Authentication pods don't start because v4-0-config-system-router-certs secret is missing in RHOCP 4
Issue
-
The
authenticationCluster Operator is degraded with the following messages:OAuthClientsControllerDegraded: the ingress config domain cannot be emptyOAuthServerConfigObservationDegraded: secret "v4-0-config-system-router-certs" not foundOAuthServerRouteEndpointAccessibleControllerDegraded: ingress config domain cannot be emptyRouterCertsDegraded: ingresses.config.openshift.io/cluster: no spec.domain specifiedCustomRouteControllerDegraded: Route.route.openshift.io "oauth-openshift" is invalid: [spec.host: Invalid value: "oauth-openshift.": host must conform to DNS 952 subdomain conventions, spec.host: Invalid value: "oauth-openshift.": a lowercase RFC 1123 label must consist of lower case alphanumeric characters or '-', and must start and end with an alphanumeric character (e.g. 'my-name', or '123-abc', regex used for validation is '[a-z0-9]([-a-z0-9]*[a-z0-9])?')] - Similar errors can be seen in the
consoleCluster Operator withConsoleDefaultRouteSyncDegraded,DownloadsDefaultRouteSyncDegraded,ConsoleDefaultRouteSyncUpgradeableandDownloadsDefaultRouteSyncUpgradeable. - There are
reconciliation failed: secret "v4-0-config-system-router-certs" not founderrors in authentication operator logs, whileopenshift-authenticationnamespace events report the errorsecret "v4-0-config-system-router-certs" not found. - Oauth pods in
openshift-authenticationstay inContainerCreatingstatus.
Environment
- Red Hat OpenShift Container Platform (RHOCP)
- 4
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.