Kubernetes controller manager crash with Elasticsearch in air-gapped environment
Problem Description In a private, air‑gapped Kubernetes cluster the kube-controller-manager pod repeatedly enters CrashLoopBackOff. The crash is triggered when the Elastic Cloud on Kubernetes (ECK) operator attempts to deploy Elasticsearch for log aggregation. Typical log excerpts are: 2026-06-05T12:34:56Z panic: x509: certificate signed by unknown authority goroutine 1 [running]: k8s.io/kubernetes/cmd/kube-controller-manager/app.run(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) /go/src/k8s.io/kubernetes/cmd/kube-controller-manager/app.go:345 … Read more