Description of problem: Customer has integrated his OCP cluster with F5 following "native integration" procedure. However it is appear that "Reencrypt routes" do not work at all. Version-Release number of selected component (if applicable): 3.4 How reproducible: Steps to Reproduce: 1. 2. 3. Actual results: Expected results: Additional info:
*** Bug 1434669 has been marked as a duplicate of this bug. ***
Rajat has a fix pending.
Fix in this PR: https://github.com/openshift/origin/pull/13898
verified in atomic-openshift-3.6.94-1.git.0.ba4aad2.el7.x86_64, the reencrypt route can work with edge/passthrough route at the same time. But after deleting the reencrypt route, the entry in related Data Group List (ssl_reencrypt_route_dg and ssl_reencrypt_servername_dg) was not removed.
And document is needed for upgrade, because the old openshift_passthrough_irule will not be updated until admin delete irule and restart f5 router pod.
Fixed with: https://github.com/openshift/origin/pull/14921
Commit pushed to master at https://github.com/openshift/origin https://github.com/openshift/origin/commit/7f13ab7211d19ee09b1e877c10935bd62a379d5f fix for bug1431655: delete reencrypt routes
verified in atomic-openshift-3.6.133-1.git.0.524e4c8.el7.x86_64 and the issue has been fixed.
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHEA-2017:1716