Uploaded image for project: 'OpenShift Request For Enhancement'
  1. OpenShift Request For Enhancement
  2. RFE-4845

rebootless update for bundle CA replacement

XMLWordPrintable

    • Icon: Feature Request Feature Request
    • Resolution: Done
    • Icon: Blocker Blocker
    • openshift-4.14
    • openshift-4.12.z
    • MCO
    • False
    • None
    • False
    • Not Selected
    • Telecommunications

      1. Proposed title of this feature request

      rebootless update for bundle CA replacement.

        
      2. What is the nature and description of the request?

      When OCP is replacing the CA bundle it will cause the MC trigger a new update, which caused the OCP node drain and reboot. We want to make this update rebootless.  The MC is replacing the certificate at /etc/pki/ca-cert/source/anchors/openshift-config-user-ca-bundle.crt. 

       

      However, replacing the CA bundle cert on RHEL does not need to reboot to take effect.

       

      Currently this is not listed in the rebootless update list

       

      3. Why does the customer need this? (List the business requirements here)

      I will list the detailed justification in the private comment.

      4. List any affected packages or components.

      Machine Config 

              rhn-support-mrussell Mark Russell
              rhn-support-bihu Bin Hu
              Votes:
              14 Vote for this issue
              Watchers:
              7 Start watching this issue

                Created:
                Updated:
                Resolved: