Bug 1808496

Summary:	DR scripts don't work in disconnected environments and download code from upstream
Product:	OpenShift Container Platform	Reporter:	Eric Rich <erich>
Component:	Etcd	Assignee:	Sam Batschelet <sbatsche>
Status:	CLOSED DUPLICATE	QA Contact:	ge liu <geliu>
Severity:	urgent	Docs Contact:
Priority:	unspecified
Version:	4.4	CC:	clichybi, dmoessne, skolicha
Target Milestone:	---	Keywords:	NeedsTestCase
Target Release:	4.4.0
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2020-03-10 17:44:44 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Eric Rich 2020-02-28 16:25:16 UTC

Description of problem: 

PR: https://github.com/openshift/machine-config-operator/pull/757/files#diff-df2f7b2c367c15c3aa83f8b8e002b3d8R23-R29 introduces code to the product that requires etcdctl to be downloaded from upstream. 


Version-Release number of selected component (if applicable): 4.1 through 4.4 (includes 4.5 Dev) 


How reproducible: 100% 

Steps to Reproduce:
1. https://docs.openshift.com/container-platform/4.3/backup_and_restore/backing-up-etcd.html (do this in an isolated network environment)


Actual results: Trying to backup / restore etcd in a disconnected (isolated network) environment will fail because etcdctl can't be downloaded from upstream sources. 


Expected results: etcdctl should be pulled from a Red Hat image or official Red Hat downstream source. 


Additional info:

Downloading code in this way violates our policy on delivery via a secure mechanism [1].

[1]https://docs.engineering.redhat.com/display/PRODSEC/Delivery+-+D5+-+Product+delivery+via+non-standard+mechanism

Comment 3 Suresh Kolichala 2020-03-10 17:44:44 UTC

The method of downloading etcdctl from outside network is no longer used. 


This is fixed in https://bugzilla.redhat.com/show_bug.cgi?id=1780396. Closing this as duplicate.

*** This bug has been marked as a duplicate of bug 1780396 ***