Uploaded image for project: 'Observability Documentation'
  1. Observability Documentation
  2. OBSDOCS-2456

[RHOSDT 3.7] OpentelemetryCollector configuration configmaps does not behave as expected

XMLWordPrintable

    • False
    • Hide

      None

      Show
      None
    • False

      With the need to add additional trust-bundle CA's to the collector, the spec.configmaps should be used.

      The operator does not honor the mountpath specified in the CR and instead attaches the configmap volume in the default location.

       configmaps:
          - mountpath: /certs/ca-bundle.crt
            name: example-ca-trustbundle 

      ends up in the pod definition as 

      $ oc get pod otel-collector-5db6f8d4c7-xvxtk -o yaml | yq -ry '.spec.containers[0].volumeMounts'
      - mountPath: /conf
        name: otc-internal
      - mountPath: /var/conf/certs/ca-bundle.crt/configmap-example-ca-trustbundle
        name: configmap-example-ca-trustbundle
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-b8jgs
        readOnly: true 

      which will fail people requiring TLS trust path to be valid talking to external services configured like

      config:
        exporters:
           whichever:
             tls:
               ca_file: /certs/ca-bundle.crt 

              rhn-support-mleonov Max Leonov
              rhn-support-milang Michaela Lang
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated: