-
Bug
-
Resolution: Unresolved
-
Undefined
-
None
-
None
-
False
-
-
False
-
-
With the need to add additional trust-bundle CA's to the collector, the spec.configmaps should be used.
The operator does not honor the mountpath specified in the CR and instead attaches the configmap volume in the default location.
configmaps: - mountpath: /certs/ca-bundle.crt name: example-ca-trustbundle
ends up in the pod definition as
$ oc get pod otel-collector-5db6f8d4c7-xvxtk -o yaml | yq -ry '.spec.containers[0].volumeMounts' - mountPath: /conf name: otc-internal - mountPath: /var/conf/certs/ca-bundle.crt/configmap-example-ca-trustbundle name: configmap-example-ca-trustbundle - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-b8jgs readOnly: true
which will fail people requiring TLS trust path to be valid talking to external services configured like
config: exporters: whichever: tls: ca_file: /certs/ca-bundle.crt