Uploaded image for project: 'Red Hat Advanced Cluster Management'
  1. Red Hat Advanced Cluster Management
  2. ACM-5290

when insecure_skip_verify variable used secret_name is NOT OPTIONAL

XMLWordPrintable

    • 1
    • False
    • None
    • False
    • No
    • T&PS 2023 #5

      Description of problem:

      When following the documentation, it states that the use of `secret_name` variable is "optioal" (optional). However, if you use the variable `insecure_skip_verify=true` then the `secret_name` is no longer optional

      Version-Release number of selected component (if applicable):

      OCP 4.10 with ACM 2.6

      How reproducible:

      Enable `insecure_skip_verify=true` without a `secret_name`

      Steps to Reproduce:

      FAILS IF:
      
      url: https://<vector-endpoint>
      http_client_config:
        basic_auth:
          username: <username>
          password: <password>
        tls_config:
          insecure_skip_tls_verify: true
      
      WORKS IF:
      
      url: https://<vector-endpoint>
      http_client_config:
        basic_auth:
          username: <username>
          password: <password>
        tls_config:
          insecure_skip_tls_verify: true
          secret_name: <secret_name>
      

       

      Actual results:

      Component doesn't work without `secret_name` if `insecure_skip_verify=true`, whereas the documentation states `secret_name` is optional

      Expected results:

      Either this works without `secret_name` (code change) when `insecure_skip_verify=true` is enabled or the documentation is updated to no longer state 'optional' for `secret_name`. It's only optional is you're `insecure_skip_verify=false`

      Additional info:

      Documentation: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.6/html/observability/observing-environments-intro#creating-the-kubernetes-secret-for-external-endpoint
      
      Red Hat Case Number: 03462851
      
      ACM Bug: https://issues.redhat.com/browse/ACM-4445

            rh-ee-faden Faisa Aden (Inactive)
            rhn-support-acardena Albert Cardenas
            Votes:
            0 Vote for this issue
            Watchers:
            7 Start watching this issue

              Created:
              Updated:
              Resolved: