Bug 1799255 - [IPI baremetal]: Add an option to disable CA verification for Redfish
Summary: [IPI baremetal]: Add an option to disable CA verification for Redfish
Keywords:
Status: CLOSED WONTFIX
Alias: None
Product: OpenShift Container Platform
Classification: Red Hat
Component: Cloud Compute
Version: 4.4
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
: 4.3.z
Assignee: Amit Ugol
QA Contact: Amit Ugol
URL:
Whiteboard:
Depends On: 1799219 1799927 1801228
Blocks:
TreeView+ depends on / blocked
 
Reported: 2020-02-06 16:21 UTC by Stephen Benjamin
Modified: 2020-05-17 16:55 UTC (History)
4 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of: 1799219
Environment:
Last Closed: 2020-05-12 16:49:12 UTC
Target Upstream Version:
Embargoed:

Attachments (Terms of Use)

Description Stephen Benjamin 2020-02-06 16:21:12 UTC 
+++ This bug was initially created as a clone of Bug #1799219 +++

When provisioning baremetal IPI using Redfish with virtual media or PXE, the default is for Ironic to verify the CA certificates, however it is typical for the CA certs to be self-signed. We should expose the option for disabling certificate verification so in lab or other environments where they have not replaced BMC certs with trusted ones, they can still test Redfish deployments.

--- Additional comment from Stephen Benjamin on 2020-02-06 16:15:26 UTC ---

Upstream PR: https://github.com/metal3-io/baremetal-operator/pull/396

Once merged, we need to cherry-pick it to openshift/baremetal-operator
Comment 1 Beth White 2020-05-12 16:49:12 UTC 
No longer backporting to 4.3
Note You need to log in before you can comment on or make changes to this bug.