-
Feature Request
-
Resolution: Done
-
Undefined
-
None
-
None
-
None
-
False
-
None
-
False
-
Not Selected
-
-
-
1. Proposed title of this feature request
check custom ingress certificate format before applying the changes
2. What is the nature and description of the request?
Check if the format of the Ingress Custom certificate is valid to be applied in the Authentication and Console.
There has been issue, where the Certificate is missing a new line at the end of the file, causing that the Certificate and Private key will be added together not on the new line.
Example (note that this is just example)
End Certificate --- Private Key
This causes Authentication Operator status to go degraded and authentication application will fail with error:
F0507 16:38:08.509428 1 cmd.go:56] failed to load SNI cert and key: tls: failed to find PEM block with type ending in "PRIVATE KEY" in key input after skipping PEM blocks of the following types: [CERTIFICATE CERTIFICATE]
Requesting the operator will process the certificate and collocate the Certificate and Private key in the correct format.
Something like:
# cat tls.crt | openssl x509
Where the `openssl x509` will format it correctly and add the new line at the end of the file.
3. Why does the customer need this? (List the business requirements here)
- The issue causes the problem with accessing the cluster through console, as Authentication application won't start correctly (check the error message above).
- Manual intervention is needed to resolve the issue.
4. List any affected packages or components.
- ingress
- authentication
- console