Back to bug 1940142

Who When What Removed Added
W. Trevor King 2021-03-17 17:05:43 UTC Keywords Upgrades
Mike Fedosin 2021-03-17 17:17:31 UTC CC mfedosin
Mike Fedosin 2021-03-17 17:42:13 UTC Priority unspecified high
Target Release --- 4.8.0
Assignee dgoodwin mfedosin
Severity unspecified medium
OpenShift BugZilla Robot 2021-03-17 17:43:02 UTC Status NEW POST
OpenShift BugZilla Robot 2021-03-17 17:43:04 UTC Link ID Github openshift/cloud-credential-operator/pull/309
Lalatendu Mohanty 2021-03-17 18:25:13 UTC CC lmohanty
wang lin 2021-03-18 02:37:02 UTC CC lwan
Akhil Rane 2021-03-18 21:23:39 UTC CC arane
Mike Fedosin 2021-03-22 11:15:37 UTC CC moddi
OpenShift BugZilla Robot 2021-03-24 13:19:28 UTC Link ID Github openshift/cloud-credential-operator/pull/314
W. Trevor King 2021-03-31 04:01:33 UTC Whiteboard ImpactStatementProposed
Severity medium high
OpenShift BugZilla Robot 2021-03-31 13:49:10 UTC Link ID Github openshift/cloud-credential-operator/pull/309
OpenShift BugZilla Robot 2021-04-02 03:15:15 UTC Status POST MODIFIED
W. Trevor King 2021-04-02 03:37:09 UTC Keywords UpgradeBlocker
Whiteboard ImpactStatementProposed
OpenShift Automated Release Tooling 2021-04-02 04:04:37 UTC Status MODIFIED ON_QA
wang lin 2021-04-12 07:59:46 UTC Status ON_QA VERIFIED
Jeana Routh 2021-06-17 16:01:49 UTC CC jrouth
errata-xmlrpc 2021-07-27 00:16:00 UTC Status VERIFIED RELEASE_PENDING
errata-xmlrpc 2021-07-27 22:53:56 UTC Status RELEASE_PENDING CLOSED
Resolution --- ERRATA
Last Closed 2021-07-27 22:53:56 UTC
errata-xmlrpc 2021-07-27 22:54:18 UTC Link ID Red Hat Product Errata RHSA-2021:2438
Jeana Routh 2021-11-09 19:53:07 UTC CC jrouth
Anita Tragler 2021-11-29 20:02:07 UTC Doc Text Who is impacted?
Customers that deployed an OCP cluster version <4.6 on OpenStack with self-signed certificates can't upgrade to 4.7.

What is the impact?
Cinder CSI driver gets incorrect CA cert path from the clouds.yaml file and can't start.

How involved is remediation?
The immediate workaround would be to manually modify the `clouds.yaml` key in `openstack-credentials` secret in `kube-system` namespace, and replace `cacert: <some value>` with `cacert: /etc/kubernetes/static-pod-resources/configmaps/cloud-config/ca-bundle.pem`. The long-term solution is to update CCO to generate correct clouds.yaml .

Is this a regression?
The issue happens only when upgrading from 4.6 to 4.7, all other versions are not affected.
Doc Type If docs needed, set a value Known Issue
CC atragler
Anita Tragler 2021-11-29 20:05:55 UTC Flags needinfo?(mfedosin)
Pierre Prinetti 2021-12-07 15:58:43 UTC CC rkant
Red Hat Bugzilla 2023-09-15 01:03:35 UTC Flags needinfo?(mfedosin)

Back to bug 1940142