Bug 1641083
Summary: | Installation failing because master controller pods fail to start. | ||
---|---|---|---|
Product: | OpenShift Container Platform | Reporter: | Josh Foots <jfoots> |
Component: | Installer | Assignee: | Vadim Rutkovsky <vrutkovs> |
Status: | CLOSED DUPLICATE | QA Contact: | Johnny Liu <jialiu> |
Severity: | urgent | Docs Contact: | |
Priority: | urgent | ||
Version: | 3.11.0 | CC: | aclewett, algonzal, aos-bugs, erich, jfoots, jokerman, mmccomas, sdodson |
Target Milestone: | --- | ||
Target Release: | 3.11.z | ||
Hardware: | Unspecified | ||
OS: | Unspecified | ||
Whiteboard: | |||
Fixed In Version: | Doc Type: | If docs needed, set a value | |
Doc Text: | Story Points: | --- | |
Clone Of: | Environment: | ||
Last Closed: | 2018-10-23 12:41:42 UTC | Type: | Bug |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: |
Description
Josh Foots
2018-10-19 15:14:26 UTC
The controllers pod indicates that it cannot read the LDAP CA. Invalid MasterConfig /etc/origin/master/master-config.yaml oauthConfig.identityProvider[0].provider.ca: Invalid value: "/etc/origin/master/LDAP_ldap_ca.crt": could not read file: stat /etc/origin/master/LDAP_ldap_ca.crt: no such file or directory A workaround would be to copy the LDAP server's certificate authority into place. Vadim, you've worked on similar problems in 3.10, is this still an outstanding problem in 3.11? The customer has closed the case and it's my understanding the problem has been resolved through updated configuration. You must set openshift_master_ldap_ca_file to the local path of a file to be copied to the target hosts as the LDAP CA or manually ensure that the LDAP CA is copied otherwise. The needinfo request[s] on this closed bug have been removed as they have been unresolved for 1000 days |