-
Bug
-
Resolution: Done-Errata
-
Major
-
4.16.0
-
None
-
No
-
0
-
WINC - Sprint 257, WINC - Sprint 258
-
2
-
False
-
-
Fixes a bug which would cause issues configuring a Windows VM which had it's default Powershell `ExecutionPolicy` set to `Restricted`. This has been resolved by bypassing the executionpolicy when running powershell commands on the VM.
-
Bug Fix
-
In Progress
This is a clone of issue OCPBUGS-30995. The following is the description of the original issue:
—
Description of problem:
There is a discrepency in how [WMCO runs powershell commands|https://github.com/openshift/windows-machine-config-operator/blob/7a814dc7360430226e82957795342d405b1f81ca/pkg/windows/windows.go#L1021], and how [WICD runs them|https://github.com/openshift/windows-machine-config-operator/blob/7a814dc7360430226e82957795342d405b1f81ca/pkg/daemon/powershell/powershell.go#L18]. WMCO explicity sets ExecutionPolicy Bypass, while WICD uses the default on the Windows VM.
Version-Release number of selected component (if applicable):
4.16
How reproducible:
Unknown
Steps to Reproduce:
1. On a BYOH node set the execution policy to restricted by running: `Set-ExecutionPolicy -Scope LocalMachine -ExecutionPolicy Restricted` 2. Attempt to configure the Node with WMCO
Actual results:
Node is not properly configured: Error message in WICD log: + CategoryInfo : SecurityError: (:) [], PSSecurityException + FullyQualifiedErrorId : UnauthorizedAccess : exit status 1 E0509 15:57:30.691935 656 controller.go:247] could not resolve PowerShell variable ENDPOINT_IP: error running command with output C:\Temp\network-conf.ps1 : File C:\Temp\network-conf.ps1 cannot be loaded. The file C:\Temp\network-conf.ps1 is not digitally signed. You cannot run this script on the current system. For more information about running scripts and setting execution policy, see about_Execution_Policies at https:/go.microsoft.com/fwlink/?LinkID=135170. At line:1 char:1 + C:\Temp\network-conf.ps1 + ~~~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : SecurityError: (:) [], PSSecurityException + FullyQualifiedErrorId : UnauthorizedAccess : exit status 1
Expected results:
Node joins the cluster as expected
Additional info:
- blocks
-
OCPBUGS-37610 WICD does not use 'ExecutionPolicy Bypass' when running powershell commands
- Verified
- clones
-
OCPBUGS-30995 WICD does not use 'ExecutionPolicy Bypass' when running powershell commands
- Closed
- is blocked by
-
OCPBUGS-30995 WICD does not use 'ExecutionPolicy Bypass' when running powershell commands
- Closed
- is cloned by
-
OCPBUGS-37610 WICD does not use 'ExecutionPolicy Bypass' when running powershell commands
- Verified
- links to
-
RHBA-2024:137314 Red Hat OpenShift for Windows Containers 10.16.1 product release
- mentioned on