Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-45256

ABI generated kubeconfig does not contain default-ingress-cert

XMLWordPrintable

    • Quality / Stability / Reliability
    • False
    • Hide

      None

      Show
      None
    • None
    • Important
    • None
    • None
    • Rejected
    • Agent Sprint 273
    • 1
    • Proposed
    • Bug Fix
    • Hide
      * Before this update, after an installation was completed, the kubeconfig file generated by the Agent-based Installer did not contain the ingress router CA. With this release, the kubeconfig contains the ingress router CA upon the completion of a cluster installation. (link:https://issues.redhat.com/browse/OCPBUGS-45256[OCPBUGS-45256])
      Show
      * Before this update, after an installation was completed, the kubeconfig file generated by the Agent-based Installer did not contain the ingress router CA. With this release, the kubeconfig contains the ingress router CA upon the completion of a cluster installation. (link: https://issues.redhat.com/browse/OCPBUGS-45256 [ OCPBUGS-45256 ])
    • None
    • None
    • None
    • None

      Description of problem:

          The kubeconfig generate via the openshift-install agent create command does not contain the router CA from the default-ingress-cert

      Version-Release number of selected component (if applicable):

          

      How reproducible:

          always

      Steps to Reproduce:

          1. openshift-install agent create image
          2. Check the content of the generated kubeconfig
          

      Actual results:

          conformance parallel test [sig-auth][Feature:LDAP] LDAP IDP should authenticate against an ldap server [apigroup:user.openshift.io][apigroup:route.openshift.io] [Suite:openshift/conformance/parallel] fails

      Expected results:

          conformance parallel test [sig-auth][Feature:LDAP] LDAP IDP should authenticate against an ldap server [apigroup:user.openshift.io][apigroup:route.openshift.io] [Suite:openshift/conformance/parallel] must pass

      Additional info:

          The non-ABI installation modifies the generated kubeconfig via the addRouterCAToClusterCA() method, which is always included in the create command (but not as an asset). The same does not happen for the ABI create command

              bfournie@redhat.com Robert Fournier
              afasano@redhat.com Andrea Fasano
              None
              Shilpa Gokul
              zhenying niu zhenying niu
              None
              Votes:
              0 Vote for this issue
              Watchers:
              13 Start watching this issue

                Created:
                Updated: