-
Bug
-
Resolution: Done
-
Critical
-
None
-
maistra-2.1.0
-
None
-
None
OSSM 2.1 error inserting data for namespace: error when creating configmap istio-ca-root-cert: configmaps "istio-ca-root-cert" already exists
When I tested the adding external cert configuration [1] using a sleep sample in foo ns,
The existing configmaps "istio-ca-root-cert" doesn't get cleanup after I delete the sleep deployment.
The configmaps "istio-ca-root-cert" blocks all future SMCP custom root or ca cert configurations.
istiod error log
error inserting data for namespace: error when creating configmap istio-ca-root-cert: configmaps "istio-ca-root-cert" already exists
How to reproduce :
Try to test the adding external cert configuration [1] twice in a namespace "foo" and use a sample app sleep.
The second run will fail and istiod log shows errors above.
Expected behavior:
User should be able to configure custom or external certs using SMCP spec configurations. An existing configmaps "istio-ca-root-cert" should be updated in member namespace instead of blocking a new cert insertion.
- blocks
-
MAISTRA-2242 Support different root certificates
- Closed
- is related to
-
MAISTRA-2630 ossm SMCP 2.0 and 2.1 adding an external ca cert failed in SMCP
- Closed
- relates to
-
OSSM-638 OSSM 2.1 error inserting data for namespace: error when creating configmap istio-ca-root-cert: configmaps "istio-ca-root-cert" already exists
- Closed