Uploaded image for project: 'Red Hat Advanced Cluster Management'
  1. Red Hat Advanced Cluster Management
  2. ACM-10999

Import controller keeps refreshing the bootstrap hub kubeconfig

XMLWordPrintable

    • False
    • None
    • False
    • Moderate
    • No

      Description of problem:

      Import controller keeps refreshing the bootstrap hub kubeconfig if a custom API server certificate is used on the hub cluster and there is any blank line between certs.

      $ kubectl -n openshift-config get secret api-certs -o jsonpath='{.data.tls\.crt}' | base64 -d
      -----BEGIN CERTIFICATE-----
      MIIEVDCCAzygAwIBAgISBKr6kb9iMsZlx0YWqBy5FJt1MA0GCSqGSIb3DQEBCwUA
      MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
      EwJSMzAeFw0yNDAzMTkxNjIyMDRaFw0yNDA2MTcxNjIyMDNaMCUxIzAhBgNVBAMT
      GmFwaS5wZXJmMS52bXcuaWJtZnVzaW9uLmV1MFkwEwYHKoZIzj0CAQYIKoZIzj0D
      AQcDQgAEpKmZLtf7eaLGh070dfN2r4oNobDamOwdN3irCdvpyZhpEylVwVYcoIJk
      GBc6SExJ+V6VyZbIsdI+izH+yF3y/aOCAjowggI2MA4GA1UdDwEB/wQEAwIHgDAd
      BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNV
      HQ4EFgQUeYZ5PQsERUAlKxF3sfY856Q4baAwHwYDVR0jBBgwFoAUFC6zF7dYVsuu
      UAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8v
      cjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9y
      Zy8wRAYDVR0RBD0wO4IdKi5hcHBzLnBlcmYxLnZtdy5pYm1mdXNpb24uZXWCGmFw
      aS5wZXJmMS52bXcuaWJtZnVzaW9uLmV1MBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIB
      AwYKKwYBBAHWeQIEAgSB9ASB8QDvAHYASLDja9qmRzQP5WoC+p0w6xxSActW3SyB
      2bu/qznYhHMAAAGOV7wLKgAABAMARzBFAiBk9m2hpiRLJ13iVQw63+UGr2sbMC1o
      mQH7zWMNc6jtfQIhAJyvcwHyZYcVIE96mPaqu5UCJSJB14xAm6qtyLUMNxaxAHUA
      dv+IPwq2+5VRwmHM9Ye6NLSkzbsp3GhCCp/mZ0xaOnQAAAGOV7wLZQAABAMARjBE
      AiBjvk435V2Rm21ovDl8nFtbUIx1KhEzC0f8+JVu/cWPvwIgRKC4AMvkW/Gdtgj8
      UmvErjmn+AvXOABoys7G1ZQsufwwDQYJKoZIhvcNAQELBQADggEBAF/fNjNpQz52
      RSKNs/pFJWm+b63HMtXNVjjExyp6BF7WnybSpweU1MS86Sl6Cqdhr31SDsSQkvM8
      uUnZSHC2xGyO3i+3hoAWDy18JjgJlOPgTPMtzmoUmPy9HyXM9GEVflF8c6DJ3Xj8
      lJgt0UV8opH1tIR+Fk0N/2Dp4fbgRXncs9xJFqGtNiC8p2wpyuhALiBrV45J7eyc
      w1cdBhRpAAKSldcymLXg3lQ4znZHxNe9MJh7YEYSo1YlkhQPpK7XyNgU/y285c1p
      7j3sLbpDsMmvSa+tV9emcGZ9BCCRWV7zbMqOhOEhYMxxxFL4jCL6VWDoqJ/0SJsI
      BIK/JIF/7p4=
      -----END CERTIFICATE-----
      
      -----BEGIN CERTIFICATE-----
      MIIFFjCCAv6gAwIBAgIRAJErCErPDBinU/bWLiWnX1owDQYJKoZIhvcNAQELBQAw
      TzELMAkGA1UEBhMCVVMxKTAnBgNVBAoTIEludGVybmV0IFNlY3VyaXR5IFJlc2Vh
      cmNoIEdyb3VwMRUwEwYDVQQDEwxJU1JHIFJvb3QgWDEwHhcNMjAwOTA0MDAwMDAw
      WhcNMjUwOTE1MTYwMDAwWjAyMQswCQYDVQQGEwJVUzEWMBQGA1UEChMNTGV0J3Mg
      RW5jcnlwdDELMAkGA1UEAxMCUjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
      AoIBAQC7AhUozPaglNMPEuyNVZLD+ILxmaZ6QoinXSaqtSu5xUyxr45r+XXIo9cP
      R5QUVTVXjJ6oojkZ9YI8QqlObvU7wy7bjcCwXPNZOOftz2nwWgsbvsCUJCWH+jdx
      sxPnHKzhm+/b5DtFUkWWqcFTzjTIUu61ru2P3mBw4qVUq7ZtDpelQDRrK9O8Zutm
      NHz6a4uPVymZ+DAXXbpyb/uBxa3Shlg9F8fnCbvxK/eG3MHacV3URuPMrSXBiLxg
      Z3Vms/EY96Jc5lP/Ooi2R6X/ExjqmAl3P51T+c8B5fWmcBcUr2Ok/5mzk53cU6cG
      /kiFHaFpriV1uxPMUgP17VGhi9sVAgMBAAGjggEIMIIBBDAOBgNVHQ8BAf8EBAMC
      AYYwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMBMBIGA1UdEwEB/wQIMAYB
      Af8CAQAwHQYDVR0OBBYEFBQusxe3WFbLrlAJQOYfr52LFMLGMB8GA1UdIwQYMBaA
      FHm0WeZ7tuXkAXOACIjIGlj26ZtuMDIGCCsGAQUFBwEBBCYwJDAiBggrBgEFBQcw
      AoYWaHR0cDovL3gxLmkubGVuY3Iub3JnLzAnBgNVHR8EIDAeMBygGqAYhhZodHRw
      Oi8veDEuYy5sZW5jci5vcmcvMCIGA1UdIAQbMBkwCAYGZ4EMAQIBMA0GCysGAQQB
      gt8TAQEBMA0GCSqGSIb3DQEBCwUAA4ICAQCFyk5HPqP3hUSFvNVneLKYY611TR6W
      PTNlclQtgaDqw+34IL9fzLdwALduO/ZelN7kIJ+m74uyA+eitRY8kc607TkC53wl
      ikfmZW4/RvTZ8M6UK+5UzhK8jCdLuMGYL6KvzXGRSgi3yLgjewQtCPkIVz6D2QQz
      CkcheAmCJ8MqyJu5zlzyZMjAvnnAT45tRAxekrsu94sQ4egdRCnbWSDtY7kh+BIm
      lJNXoB1lBMEKIq4QDUOXoRgffuDghje1WrG9ML+Hbisq/yFOGwXD9RiX8F6sw6W4
      avAuvDszue5L3sz85K+EC4Y/wFVDNvZo4TYXao6Z0f+lQKc0t8DQYzk1OXVu8rp2
      yJMC6alLbBfODALZvYH7n7do1AZls4I9d1P4jnkDrQoxB3UqQ9hVl3LEKQ73xF1O
      yK5GhDDX8oVfGKF5u+decIsH4YaTw7mP3GFxJSqv3+0lUFJoi5Lc5da149p90Ids
      hCExroL1+7mryIkXPeFM5TgO9r0rvZaBFOvV2z0gp35Z0+L4WPlbuEjN/lxPFin+
      HlUjr8gRsI3qfJOQFy/9rKIJR0Y/8Omwt/8oTWgy1mdeHmmjk7j1nYsvC9JSQ6Zv
      MldlTTKB3zhThV1+XWYp6rjd5JW1zbVWEkLNxE7GJThEUG3szgBVGP7pSWTUTsqX
      nLRbwHOoq7hHwg==
      -----END CERTIFICATE----- 

      Version-Release number of selected component (if applicable):

      How reproducible:

      Steps to Reproduce:

      1.  
      2.  
      3. ...

      Actual results:

      Expected results:

      Additional info:

            leyan@redhat.com Le Yang
            leyan@redhat.com Le Yang
            Hui Chen Hui Chen
            Votes:
            0 Vote for this issue
            Watchers:
            4 Start watching this issue

              Created:
              Updated:
              Resolved: