Skip to content

[OSDOCS-20226]: Adding info about approving CSRs - #117169

Open
lahinson wants to merge 1 commit into
openshift:mainfrom
lahinson:osdocs-20226-graceful-restart-csrs
Open

[OSDOCS-20226]: Adding info about approving CSRs#117169
lahinson wants to merge 1 commit into
openshift:mainfrom
lahinson:osdocs-20226-graceful-restart-csrs

Conversation

@lahinson

@lahinson lahinson commented Aug 3, 2026

Copy link
Copy Markdown
Contributor

@openshift-ci openshift-ci Bot added the size/S Denotes a PR that changes 10-29 lines, ignoring generated files. label Aug 3, 2026
@lahinson lahinson added this to the Continuous Release milestone Aug 3, 2026
@ocpdocs-previewbot

ocpdocs-previewbot commented Aug 3, 2026

Copy link
Copy Markdown

🤖 Mon Aug 03 15:25:16 - Prow CI generated the docs preview:

https://117169--ocpdocs-pr.netlify.app/openshift-enterprise/latest/backup_and_restore/graceful-cluster-restart.html

@lahinson
lahinson force-pushed the osdocs-20226-graceful-restart-csrs branch from 9bb2e17 to 7ba4fda Compare August 3, 2026 15:18
@openshift-ci

openshift-ci Bot commented Aug 3, 2026

Copy link
Copy Markdown

@lahinson: all tests passed!

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

Comment on lines +235 to +249
. If a CSR is not approved after the restart, you can investigate possible issues by checking the logs:
+
.. Check the Machine Approver logs by entering the following command:
+
[source,terminal]
----
$ oc logs -n openshift-cluster-machine-approver -l app=machine-approver
----
+
.. Check the Kube Controller Manager logs by entering the following command:
+
[source,terminal]
----
$ oc logs -n openshift-kube-controller-manager -l app=kube-controller-manager
----

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It might make sense for us to be a bit more explicit as to the scenarios in which one might want to check which components logs.

Based on the README of https://github.com/openshift/cluster-machine-approver , it looks like machine-approver would be more for the scenario where CSRs for new worker nodes attempting to join the cluster have not been approved.

It looks like kube-controller-manager seems like it would be generally useful to look at logs for in CSR error scenarios as it looks like it is largely responsible for most of the CSR operations.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

branch/enterprise-4.21 branch/enterprise-4.22 branch/enterprise-5.0 size/S Denotes a PR that changes 10-29 lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants