Bug 1762618
Summary: | [proxy] report-progress.sh on bootstrap need external api server to create bootstrap configmap resource | |||
---|---|---|---|---|
Product: | OpenShift Container Platform | Reporter: | Johnny Liu <jialiu> | |
Component: | Installer | Assignee: | Jeremiah Stuever <jstuever> | |
Installer sub component: | openshift-installer | QA Contact: | Johnny Liu <jialiu> | |
Status: | CLOSED ERRATA | Docs Contact: | ||
Severity: | high | |||
Priority: | high | |||
Version: | 4.3.0 | |||
Target Milestone: | --- | |||
Target Release: | 4.3.0 | |||
Hardware: | Unspecified | |||
OS: | Unspecified | |||
Whiteboard: | ||||
Fixed In Version: | Doc Type: | If docs needed, set a value | ||
Doc Text: | Story Points: | --- | ||
Clone Of: | ||||
: | 1766066 (view as bug list) | Environment: | ||
Last Closed: | 2020-01-23 11:07:51 UTC | Type: | Bug | |
Regression: | --- | Mount Type: | --- | |
Documentation: | --- | CRM: | ||
Verified Versions: | Category: | --- | ||
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | ||
Cloudforms Team: | --- | Target Upstream Version: | ||
Embargoed: | ||||
Bug Depends On: | ||||
Bug Blocks: | 1766066, 1770223 |
Description
Johnny Liu
2019-10-17 04:42:03 UTC
That PR was merged in order to resolve https://bugzilla.redhat.com/show_bug.cgi?id=1762618 My opinion is that customer proxy configuration should include external api in its whitelist. What is the reason for report-progress.sh to use the api-server's external name instead of internal name? > My opinion is that customer proxy configuration should include external api in its whitelist. I think including external api in its whitelist is some kind of workaround. The potential reasonable fix is run oc command against internal api in cluster itself instead of external api. > What is the reason for report-progress.sh to use the api-server's external > name instead of internal name? The default kubeconfig for oc command is using the api-server's external name. Verified this bug with 4.3.0-0.nightly-2019-11-13-031554, and PASS. On bootstrap: [root@ip-10-0-63-30 ~]# env|grep -i proxy|grep api NO_PROXY=.cluster.local,.svc,.us-east-2.compute.internal,10.0.0.0/16,10.128.0.0/14,127.0.0.1,169.254.169.254,172.30.0.0/16,api-int.jialiu43-bz.qe.devcluster.openshift.com,etcd-0.jialiu43-bz.qe.devcluster.openshift.com,etcd-1.jialiu43-bz.qe.devcluster.openshift.com,etcd-2.jialiu43-bz.qe.devcluster.openshift.com,localhost,test.no-proxy.com [root@ip-10-0-63-30 ~]# cat /opt/openshift/auth/kubeconfig clusters: - cluster: <--snip--> server: https://api-int.jialiu43-bz.qe.devcluster.openshift.com:6443 name: jialiu43-bz Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2020:0062 |