Description of problem:
Add named certificates to ansible inventory file, and ran certificate redeploy playbook, but provided certs were not added to master-config.yaml.
Version-Release number of the following components:
openshift-ansible-3.9.3-1.git.0.e166207.el7.noarch
ansible-2.4.4-0.1.beta1.el7ae.noarch
How reproducible:
Always
Steps to Reproduce:
1.Add the following two options to ansible inventory file
openshift_master_overwrite_named_certificates=true
openshift_master_named_certificates=[{"certfile": "/root/x/12817_named.crt", "keyfile": "/root/x/12817_named.key","cafile": "/root/x/12817_named_ca.pem"}]
2.Run cert redeploy playbook against the 3.9 cluster
ansible-playbook -i host/host -vvv /usr/share/ansible/openshift-ansible/playbooks/redeploy-certificates.yml
Actual results:
After playbook finished, the provided named certs file were uploaded to master.
[root@ip-172-18-1-172 ~]# ls /etc/origin/master/named_certificates/
12817_named_ca.pem 12817_named.crt 12817_named.key
But no namedCertificates configured in master-config.yaml
Expected results:
Additional info:
Full log attached
This does not appear to be a regression. At least when reviewing 3.7 codebase I don't see anything that would configure masters to use named_certificates if they had not previously been configured to use them. If a host was configured for named_certificates at install time it would update the certificates as expected but not modify the master config to add any additional named_certificates.
So moving this to 3.9.z
Description of problem: Add named certificates to ansible inventory file, and ran certificate redeploy playbook, but provided certs were not added to master-config.yaml. Version-Release number of the following components: openshift-ansible-3.9.3-1.git.0.e166207.el7.noarch ansible-2.4.4-0.1.beta1.el7ae.noarch How reproducible: Always Steps to Reproduce: 1.Add the following two options to ansible inventory file openshift_master_overwrite_named_certificates=true openshift_master_named_certificates=[{"certfile": "/root/x/12817_named.crt", "keyfile": "/root/x/12817_named.key","cafile": "/root/x/12817_named_ca.pem"}] 2.Run cert redeploy playbook against the 3.9 cluster ansible-playbook -i host/host -vvv /usr/share/ansible/openshift-ansible/playbooks/redeploy-certificates.yml Actual results: After playbook finished, the provided named certs file were uploaded to master. [root@ip-172-18-1-172 ~]# ls /etc/origin/master/named_certificates/ 12817_named_ca.pem 12817_named.crt 12817_named.key But no namedCertificates configured in master-config.yaml Expected results: Additional info: Full log attached