-
Feature
-
Resolution: Unresolved
-
Major
-
None
-
None
-
None
-
BU Product Work
-
False
-
-
False
-
0% To Do, 100% In Progress, 0% Done
-
0
-
Program Call
Feature Overview
As a user deploying OpenShift on bare metal I want the installer to use the NTP servers that I specify at install time.
Problem
When the Ironic pre-provisioning image containing IPA is running, there is no way to sync the clocks to a custom NTP server. This causes issues with certificates - IPA generates a certificate for itself to be valid starting 1 hour in the past (see OCPBUGSM-21571), so if the hardware clock is more than 1 hour ahead of the real time then the certificate will be rejected by Ironic.
A new field is required in install-config.yaml where the user can specify additional NTP servers that can then be used to set up a chrony config in the IPA ISO. (Potentially this could also be used to automatically generate the MachineConfig manifests to add the same config to the cluster.)
See initial discussion here: OCPBUGS-22957
- causes
-
RFE-5046 Ability to sync OS time from NTP and update HW clock at the time of installation of OpenShift
- Accepted
- is documented by
-
HCIDOCS-373 Docs for OCPSTRAT-1425 Support additional NTP servers in install-config for bare metal (IPI)
- New