Created https://github.com/openshift/openshift-ansible/pull/10432

Fix is available in openshift-ansible-3.10.63-1

Verified with openshift-ansible-3.10.66-1.git.0.3c3a83a.el7.noarch.rpm

With the following two parameters defined in ansible inventory file, upgrade an ocp-3.9 cluster to 3.10.

openshift_master_identity_providers=[{'name': 'LDAP_auth', 'login': 'true', 'challenge': 'true', 'kind': 'LDAPPasswordIdentityProvider', 'attributes': {'id': ['dn'], 'email': ['mail'], 'name': ['uid'], 'preferredUsername': ['uid']}, 'bindDN': '', 'bindPassword': '', 'url': 'ldap://test.com:389/ou=People,dc=my-domain,dc=com?uid'}]
openshift_master_ldap_ca_file=/extra-ansible/files/ldap.ca.crt

During upgrade, the specified ldap ca file would be copied to master as /etc/origin/master/LDAP_auth_ldap_ca.crt, oauthConfig.identityProviders of master-config.yaml also got updated correspondingly. 


  identityProviders:
  - challenge: true
    login: true
    mappingMethod: claim
    name: LDAP_auth
    provider:
      apiVersion: v1
      attributes:
        email:
        - mail
        id:
        - dn
        name:
        - uid
        preferredUsername:
        - uid
      bindDN: ''
      bindPassword: ''
      ca: /etc/origin/master/LDAP_auth_ldap_ca.crt
      insecure: false
      kind: LDAPPasswordIdentityProvider
      url: ldap://test.com:389/ou=People,dc=my-domain,dc=com?uid

Hi,

Do we know when this will be released, which errata or .z release will include that and the estimated date of that release?

Thanks in advance!

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2019:0026