Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Rancher AWS: Resource module.rancher_common.helm_release.cert_manager runs into 5m timeout during destroy #244

Open
wombelix opened this issue Nov 4, 2024 · 0 comments · May be fixed by #245

Comments

@wombelix
Copy link

wombelix commented Nov 4, 2024

Issue:
Helm uninstall of cert-manager runs into 5m timeout during destroy.

Reason:
As long Rancher Quickstart uses an (outdated) cert-manager version below 1.15.0, the problem doesn't occur:

https://cert-manager.io/docs/installation/helm/#uninstalling-with-helm

cert-manager versions prior to v1.15.0 do not keep the CustomResourceDefinition on uninstall and will remove all Issuers,ClusterIssuers,Certificates,CertificateRequests,Orders and Challenges resources from the cluster. Make sure to back up your cert-manager resources before uninstalling cert-manager if you are using a version prior to v1.15.0. Or upgrade to v1.15.0 before uninstalling.

Running Helm manually without --wait, uninstall works but provides this additional output:

These resources were kept due to the resource policy:
[CustomResourceDefinition] certificaterequests.cert-manager.io
[CustomResourceDefinition] certificates.cert-manager.io
[CustomResourceDefinition] challenges.acme.cert-manager.io
[CustomResourceDefinition] clusterissuers.cert-manager.io
[CustomResourceDefinition] issuers.cert-manager.io
[CustomResourceDefinition] orders.acme.cert-manager.io

When using --wait / wait = true, Helm will wait for the CRDs to be gone, which will never happen.
Easiest fix is to use wait = false, Rancher depends on cert-manager but doesn't need all resources up and running during installation.

Fixing this Issue will unblock the cert-manager version bump in #240 too.

wombelix added a commit to wombelix/fork_rancher_quickstart that referenced this issue Nov 4, 2024
Resource 'module.rancher_common.helm_release.cert_manager' runs into 5m timeout during destroy with cert-manager >=1.15.0 because of CRD resource policy

Refs: rancher#240

Fixes: rancher#244
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant