Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Automatic upgrade failure on openshift 1.3.1→1.4.0 #629

Open
mhyzon opened this issue Feb 24, 2025 · 4 comments
Open

Automatic upgrade failure on openshift 1.3.1→1.4.0 #629

mhyzon opened this issue Feb 24, 2025 · 4 comments

Comments

@mhyzon
Copy link

mhyzon commented Feb 24, 2025

Is anyone else seeing a failure of the automatic operator upgrade on Openshift from 1.3.1 to 1.4.0?

I'm on RHOSCP 4.14.35 / k8s version: v1.27.16+e826056

The operator tried to install 1.4.0 last week. I'm seeing the following error in the manager container on the falcon-operator-controller-manager pod for the new version

panic: opensslcrypto: can't initialize OpenSSL : openssl: can't retrieve OpenSSL version

goroutine 1 [running]:
crypto/internal/backend.init.0()
	/usr/lib/golang/src/crypto/internal/backend/openssl.go:65 +0x299
@mhyzon
Copy link
Author

mhyzon commented Feb 26, 2025

This looks like it's a conflict with our cluster being in FIPS mode? This error looks eerily similar to golang-fips/openssl#176 which they say is a go interopability bug, but also maybe requires a recompile to support FIPS mode? I'm not sure, this is all way in the golang innards and way above my head

@evanstoner
Copy link
Contributor

Hey @mhyzon - engineering is trying to reproduce. Stand by.

@evanstoner
Copy link
Contributor

Thanks for the report @mhyzon. Engineering identified an issue related to the version of the Go toolset used. For now, you'll have to revert to 1.3.1. We're tracking the issue, so look for a fix in a future operator's release notes.

I'll leave this issue open and comment back when the fix is released.

@mhyzon
Copy link
Author

mhyzon commented Feb 27, 2025

Thanks, good to know.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants