OpenShift 4 - Ingress Controller CRL Error

openshift4-ingress-controller-crl-error.txt

I1110 03:21:47.432925       1 template.go:560] "msg"="starting router" "logger"="router" "version"="majorFromGit: \nminorFromGit: \ncommitFromGit: d8058949aaf91dcdea050c58e6a34ef5f6670c67\nversionFromGit: 4.0.0-563-gd8058949\ngitTreeState: clean\nbuildDate: 2025-08-21T15:43:32Z\n"
I1110 03:21:47.435962       1 metrics.go:156] "msg"="router health and metrics port listening on HTTP and HTTPS" "address"="0.0.0.0:11936" "logger"="metrics"
I1110 03:21:47.443029       1 router.go:217] "msg"="creating a new template router" "logger"="template" "writeDir"="/var/lib/haproxy"
I1110 03:21:47.443121       1 router.go:302] "msg"="router will coalesce reloads within an interval of each other" "interval"="5s" "logger"="template"
I1110 03:21:47.443641       1 router.go:372] "msg"="watching for changes" "logger"="template" "path"="/etc/pki/tls/private"
I1110 03:21:47.444393       1 router.go:372] "msg"="watching for changes" "logger"="template" "path"="/etc/pki/tls/client-ca"
I1110 03:21:47.444450       1 router.go:283] "msg"="router is including routes in all namespaces" "logger"="router"
I1110 03:21:47.444715       1 crl.go:361] "msg"="retrieving certificate revocation list" "logger"="crl" "subject key identifier"="8c8b9095d4a9cca2ca8343c93da2c1dcf761ba7d"
I1110 03:21:47.444755       1 crl.go:401] "msg"="retrieving CRL distribution point" "distribution point"="http://r12.c.lencr.org/45.crl" "logger"="crl"
I1110 03:21:47.464248       1 reflector.go:359] Caches populated for *v1.Route from github.com/openshift/router/pkg/router/controller/factory/factory.go:124
I1110 03:21:47.476245       1 reflector.go:359] Caches populated for *v1.EndpointSlice from github.com/openshift/router/pkg/router/controller/factory/factory.go:124
I1110 03:21:47.479020       1 reflector.go:359] Caches populated for *v1.Service from github.com/openshift/router/pkg/router/template/service_lookup.go:33
E1110 03:21:47.562916       1 haproxy.go:418] can't scrape HAProxy: dial unix /var/lib/haproxy/run/haproxy.sock: connect: no such file or directory
I1110 03:21:47.674654       1 router.go:669] "msg"="router reloaded" "logger"="template" "output"=" - Checking http://localhost:10080 ...\n - Health check ok : 0 retry attempt(s).\n"
I1110 03:21:52.754250       1 router.go:669] "msg"="router reloaded" "logger"="template" "output"=" - Checking http://localhost:10080 ...\n - Health check ok : 0 retry attempt(s).\n"
I1110 03:22:17.446922       1 crl.go:417] "msg"="failed to get valid CRL after trying all distribution points" "logger"="crl"
E1110 03:22:17.446987       1 crl.go:203] "msg"="failed to update CRLs" "error"="failed to get certificate revocation list for certificate key 8c8b9095d4a9cca2ca8343c93da2c1dcf761ba7d: error getting \"http://r12.c.lencr.org/45.crl\": http.Get failed: Get \"http://r12.c.lencr.org/45.crl\": dial tcp 104.18.20.213:80: i/o timeout" "logger"="crl"
I1110 03:22:17.447083       1 crl.go:467] "msg"="no stale directories" "logger"="crl"
E1110 03:22:17.447100       1 crl.go:174] "msg"="failed to update CRLs" "error"="failed to get certificate revocation list for certificate key 8c8b9095d4a9cca2ca8343c93da2c1dcf761ba7d: error getting \"http://r12.c.lencr.org/45.crl\": http.Get failed: Get \"http://r12.c.lencr.org/45.crl\": dial tcp 104.18.20.213:80: i/o timeout" "logger"="crl"
I1110 03:22:34.933355       1 router.go:669] "msg"="router reloaded" "logger"="template" "output"=" - Checking http://localhost:10080 ...\n - Health check ok : 0 retry attempt(s).\n"