Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-32042

Incorrect usage of install-config.yaml additionalTrustBundle field

XMLWordPrintable

    • Important
    • No
    • Sprint 252
    • 1
    • Proposed
    • False
    • Hide

      None

      Show
      None
    • Hide
      * Previously, when using the Agent-based installation program in a disconnected environment, unnecessary certificates were added to the CA trust bundle. With this update, the CA bundle ConfigMap only contains CAs explicitly specified by the user. (link:https://issues.redhat.com/browse/OCPBUGS-32042[*OCPBUGS-32042*])
      Show
      * Previously, when using the Agent-based installation program in a disconnected environment, unnecessary certificates were added to the CA trust bundle. With this update, the CA bundle ConfigMap only contains CAs explicitly specified by the user. (link: https://issues.redhat.com/browse/OCPBUGS-32042 [* OCPBUGS-32042 *])
    • Bug Fix
    • Done

      Description of problem:

      When the user configures the install-config.yaml additionalTrustBundle field (for example, in a disconnected installation using a local registry),
      the user-ca-bundle configmap gets populated with more content than strictly required

      Version-Release number of selected component (if applicable):

          

      How reproducible:

      Always

      Steps to Reproduce:

          1. Setup a local registry and mirror the content of an ocp release
          2. Configure the install-config.yaml for a mirrored installation. In particular, configure the additionalTrustBundle field with the registry cert
          3. Create the agent ISO, boot the nodes and wait for the installation to complete
          

      Actual results:

          The user-ca-bundle cm does not contain onyl the registry cert

      Expected results:

      user-ca-bundle configmap with just the content of the install-config additionalTrustBundle field

      Additional info:

           

            afasano@redhat.com Andrea Fasano
            afasano@redhat.com Andrea Fasano
            Biagio Manzari Biagio Manzari
            Votes:
            0 Vote for this issue
            Watchers:
            8 Start watching this issue

              Created:
              Updated:
              Resolved: