-
Bug
-
Resolution: Done
-
Major
-
ACM 2.10.0, MCE 2.5.0
-
None
-
False
-
None
-
False
-
-
-
Moderate
-
No
Description of problem:
Import controller keeps refreshing the bootstrap hub kubeconfig if a custom API server certificate is used on the hub cluster and there is any blank line between certs.
$ kubectl -n openshift-config get secret api-certs -o jsonpath='{.data.tls\.crt}' | base64 -d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Version-Release number of selected component (if applicable):
How reproducible:
Steps to Reproduce:
- ...
Actual results:
Expected results:
Additional info:
- clones
-
ACM-10735 Import controller keeps refreshing the bootstrap hub kubeconfig
- Closed
- links to
-
RHSA-2024:130273 Multicluster Engine for Kubernetes 2.5.3 security updates and bug fixes