Uploaded image for project: 'Distributed Tracing'
  1. Distributed Tracing
  2. TRACING-4348

TempoStack CR does not accept storage CA names with a dot

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done-Errata
    • Icon: Critical Critical
    • rhosdt-3.3
    • None
    • Tempo
    • None
    • Tracing Sprint # 256
    • Important

      Description of problem:

      The spec.storage.tls.caName field in the TempoStack CRD directly reflects the ConfigMap name in the Pod, so ConfigMaps with names containing dots cannot be specified. In TempoOperator versions prior to 0.7.0 the name was fixed as "storage-ca", so this issue did not occur.
      https://github.com/grafana/tempo-operator/blob/v0.7.0/internal/manifests/manifestutils/storage.go#L14

      Version-Release number of selected component (if applicable):

      Tempo Operator 0.10.0-6

      How reproducible:

      Create TempoStack CRD with a storage which is signed by a custom CA

      Steps to Reproduce:

      1. Create TempoStack CRD by configuring a storage CA - e.g. openshift-service-ca.crt
      
      ~~~
        storage:
          secret:
            name: tempo-odf
            type: s3
          tls:
            caName: openshift-service-ca.crt
            enabled: true
      ~~~
      
      2. pods will fail with below error
      
      ~~~
      failed to create objects for tracing-tempo: Deployment.apps "tempo-tracing-tempo-query-frontend" is invalid: [spec.template.spec.volumes[3].name: Invalid value: "service-ca.crt": must not contain dots, spec.template.spec.containers[0].volumeMounts[2].name: Not found: "service-ca.crt"]Deployment.apps "tempo-tracing-tempo-querier" is invalid: [spec.template.spec.volumes[2].name: Invalid value: "service-ca.crt": must not contain dots, spec.template.spec.containers[0].volumeMounts[2].name: Not found: "service-ca.crt"]Deployment.apps "tempo-tracing-tempo-compactor" is invalid: [spec.template.spec.volumes[2].name: Invalid value: "service-ca.crt": must not contain dots, spec.template.spec.containers[0].volumeMounts[2].name: Not found: "service-ca.crt"]
      ~~~
      
      

      Actual results:

       

      Expected results:

       

      Additional info:

       

              rvargasp@redhat.com Ruben Vargas Palma
              rhn-support-shishika Shinri Ishikawa
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Created:
                Updated:
                Resolved: