Loading...

XML

Word

Printable

Type: Bug
Resolution: Unresolved
Priority: Normal
Fix Version/s: 4.22.0
Affects Version/s: 4.21
Component/s: Bare Metal Hardware Provisioning / cluster-baremetal-operator
Labels:
- triaged

Activity Type:
None
Blocked:
False
Blocked Reason:

Hide

None

Show
None
Story Points:
2
Severity:
None
Regression:
None

Target Backport Versions:
None
Target Version:

4.22.0
Release Blocker:
None
Sprint:
Metal Platform 281, Metal Platform 282
sprint_count:
2

SFDC Cases Counter:
SFDC Cases Open:
SFDC Cases Links:

PX Impact Score:

Release Note Status:
None
Release Note Type:
None
Release Note Text:
None

Escape Reason:
None
Escape Impact:
None
Corrective Measures:
None
SDLC stage when should've been found:
None

Description of problem:


After fixing the issue of ironic writing to the readOnly "/certs/ca/ironic" path when the ironic-ca-cert path is not set, remove the writable ironic-ca-cert mount at "/certs/ca/ironic" path.

blocks

OCPBUGS-70163 CBO: remove the writable ironic-ca-cert mount

POST

depends on

OCPBUGS-65969 Set the tls cacert path to writable mount when the IRONIC_CACERT_FILE is unset

Verified

is cloned by

OCPBUGS-70163 CBO: remove the writable ironic-ca-cert mount

POST

links to

openshift/cluster-baremetal-operator#535: OCPBUGS-67216: Remove the writable ironic CA cert volume mount at /certs/ca/ironic path, ironic will use the writable /conf mount if needed

Assignee:: Himanshu Roy

Reporter:: Himanshu Roy

Need Info From:: None

Contributors:: None

QA Contact:: Jad Haj Yahya

Doc Contact:: None

Votes:: 0 Vote for this issue

Watchers:: 5 Start watching this issue

Created:: 2025/12/11 10:00 AM

Updated:: 2026/01/07 6:07 AM