Unable to login to the cluster with cluster operators authentication, console and ingress marked as degraded.

Solution Verified - Updated -

Issue

  • Not possible to access the cluster because cluster operators authentication, console and ingress are degraded.

  • Error messages on Authentication operator.

[...]
status:
  conditions:
    message: 'OAuthServerRouteEndpointAccessibleControllerDegraded: Get "https://oauth-openshift.apps.<cluster-name>.<cluster-domain>/healthz": context deadline exceeded (Client.Timeout exceeded while awaiting headers)'
    reason: OAuthServerRouteEndpointAccessibleController_SyncError
  [...]
    message: 'OAuthServerRouteEndpointAccessibleControllerAvailable: Get "https://oauth-openshift.apps.<cluster-name>.<cluster-domain>/healthz": context deadline exceeded (Client.Timeout exceeded while awaiting headers)'
    reason: OAuthServerRouteEndpointAccessibleController_EndpointUnavailable
  • Error messages on Console operator.
[...]
status:
  conditions:
    message: 'RouteHealthDegraded: failed to GET route (https://console-openshift-console.apps.<cluster-name>.<cluster-domain>):
      Get "https://console-openshift-console.apps.<cluster-name>.<cluster-domain>":context deadline exceeded (Client.Timeout exceeded while awaiting headers)'
    reason: RouteHealth_FailedGet
[...]
    message: |-
      DeploymentAvailable: 0 replicas available for console deployment
      RouteHealthAvailable: failed to GET route (https://console-openshift-console.apps.<cluster-name>.<cluster-domain>): Get "https://console-openshift-console.apps.<cluster-name>.<cluster-domain>": context deadline exceeded (Client.Timeout exceeded while awaiting headers)
    reason: Deployment_InsufficientReplicas::RouteHealth_FailedGet
  • Error messages on Ingress operator.
[...]
status:
  conditions:
    message: |-
      ingresscontroller "default" is progressing: IngressControllerProgressing: One or more status conditions indicate progressing: DeploymentRollingOut=True (DeploymentRollingOut: Waiting for router deployment rollout to finish: 1 of 2 updated replica(s) are available...
      ).
[...]
    message: 'The "default" ingress controller reports Degraded=True: DegradedConditions:
      One or more other status conditions indicate a degraded state: CanaryChecksSucceeding=False
      (CanaryChecksRepetitiveFailures: Canary route checks for the default ingress
      controller are failing)'
    reason: IngressDegraded

Environment

  • Openshift Container Platform 4.15

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content