Bug 1628546
| Summary: | [3.10] Redeploy openshift ca playbook failed | ||
|---|---|---|---|
| Product: | OpenShift Container Platform | Reporter: | Russell Teague <rteague> |
| Component: | Installer | Assignee: | Russell Teague <rteague> |
| Status: | CLOSED ERRATA | QA Contact: | Gaoyun Pei <gpei> |
| Severity: | high | Docs Contact: | |
| Priority: | high | ||
| Version: | 3.10.0 | CC: | antonio, aos-bugs, farandac, gpei, jokerman, judd, mmccomas, rhowe, wsun |
| Target Milestone: | --- | ||
| Target Release: | 3.10.z | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | Bug Fix | |
| Doc Text: |
Corrected redeploy-openshift-ca.yml playbook to reference the correct node client certificate file, node/client-ca.crt.
|
Story Points: | --- |
| Clone Of: | 1585978 | Environment: | |
| Last Closed: | 2018-11-11 16:39:11 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | 1585978 | ||
| Bug Blocks: | |||
|
Comment 1
Russell Teague
2018-09-13 12:12:54 UTC
openshift-ansible-3.10.48-1 Checked with openshift-ansible-3.10.50-1.git.0.96a93c5.el7, we're missing this PR https://github.com/openshift/openshift-ansible/pull/9962 Opened new backport PR: https://github.com/openshift/openshift-ansible/pull/10191 Verify this bug with openshift-ansible-3.10.51-1.git.0.44a646c.el7.noarch.rpm After run openshift CA redeployment playbook On master: /etc/origin/master/ca.crt updated to a new self-generated CA cert file, the new CA file also added into ca-bundle.crt and client-ca-bundle.crt, CA data of admin.kubeconfig and openshift-master.kubeconfig got updated with new ca-bundle.crt content. On nodes: New ca-bundle.crt copied to each node as /etc/origin/node/client-ca.crt, CA data of node.kubeconfig got updated with new ca-bundle.crt content. Master and node service are all running well and app's creation test passed. Move this bug to verified. *** Bug 1641538 has been marked as a duplicate of this bug. *** Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHSA-2018:2709 CA redeploy is still broken as it will not redistribute node certs. https://bugzilla.redhat.com/show_bug.cgi?id=1652746 |