Uploaded image for project: 'OpenShift Request For Enhancement'
  1. OpenShift Request For Enhancement
  2. RFE-4845

rebootless update for bundle CA replacement

XMLWordPrintable

    • Icon: Feature Request Feature Request
    • Resolution: Done
    • Icon: Blocker Blocker
    • openshift-4.14
    • openshift-4.12.z
    • MCO
    • False
    • None
    • False
    • Not Selected
    • 0
    • 0% 0%
    • Telecommunications

      1. Proposed title of this feature request

      rebootless update for bundle CA replacement.

        
      2. What is the nature and description of the request?

      When OCP is replacing the CA bundle it will cause the MC trigger a new update, which caused the OCP node drain and reboot. We want to make this update rebootless.  The MC is replacing the certificate at /etc/pki/ca-cert/source/anchors/openshift-config-user-ca-bundle.crt. 

       

      However, replacing the CA bundle cert on RHEL does not need to reboot to take effect.

       

      Currently this is not listed in the rebootless update list

       

      3. Why does the customer need this? (List the business requirements here)

      I will list the detailed justification in the private comment.

      4. List any affected packages or components.

      Machine Config 

            rhn-support-mrussell Mark Russell
            rhn-support-bihu Bin Hu
            Votes:
            14 Vote for this issue
            Watchers:
            7 Start watching this issue

              Created:
              Updated:
              Resolved: