Bug 1817436

Created attachment 1673763 [details]
Jenkins DC

Description of problem:
Customer has added an additional CA trust bundle by modifying the proxy resource after installing Openshift 4.3 cluster. The 'custom-ca' configmap exists in openshift-config project.

~~~
apiVersion: v1
items:
- apiVersion: config.openshift.io/v1
  kind: Proxy
  metadata:
    name: cluster
  spec:
    trustedCA:
      name: custom-ca
  status: {}
~~~

After configuring additional ca trust bundle, he deployed jenkins from jenkins-ephemeral template. While login to jenkins he is facing SSL error.

We have followed steps mentioned in document[1] to inject the certificate using operator. However the issue persists.

[1] - https://docs.openshift.com/container-platform/4.3/networking/configuring-a-custom-pki.html#certificate-injection-using-operators_configuring-a-custom-pki

Version-Release number of selected component (if applicable):

Openshift 4.3

How reproducible:
Not sure

Steps to Reproduce:
1. Configure additional trusted ca bundle by modifying proxy resource
2. Deploy Jenkins
3. Follow document[1] to inject the certificate to jenkins deployment
4. Try to login

Actual results:
Unable to login to jenkins

Expected results:
Should be able to login to Jenkins

Additional info:
Login to other application like grafana, prometheus is possible. The error is mostly due to jenkins being a java based application. Jenkins DC definition and POD log attached.