tnozicka / openshift-acme

ACME Controller for OpenShift and Kubernetes Cluster. (Supports e.g. Let's Encrypt)

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Exposer pods continue to run after cert is issued

lukastheblack opened this issue · comments

I had to create a large amount of routes recently for work, and this deployment successfully issued lets encrypt certs for them. The problem is that I have 60+ exposer pods still running in the namespace, no errors in the openshift-acme logs, no errors on the pods themselves, and I'm confused as to how to remove them correctly. Please advise, and let me know what other information I can provide.

Issues go stale after 90d of inactivity.

Mark the issue as fresh by commenting /remove-lifecycle stale.
Stale issues rot after an additional 30d of inactivity and eventually close.
Exclude this issue from closing by commenting /lifecycle frozen.

If this issue is safe to close now please do so with /close.

/lifecycle stale

I have the same issue and found the problem.
The controller does not set the correct API Version in the owner reference of the dependent resources.
It sets the API Version to v1 while route.openshift.io/v1 would be the proper version for kubernetes to actually run garbage collection on those resources.