Bug 2141419 - Unable to set TLS Security profile for CNAO using HCO jsonpatch annotations
Summary: Unable to set TLS Security profile for CNAO using HCO jsonpatch annotations
Keywords:
Status: CLOSED DUPLICATE of bug 2141399
Alias: None
Product: Container Native Virtualization (CNV)
Classification: Red Hat
Component: Installation
Version: 4.12.0
Hardware: x86_64
OS: Linux
unspecified
low
Target Milestone: ---
: ---
Assignee: Simone Tiraboschi
QA Contact: SATHEESARAN
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2022-11-09 19:09 UTC by SATHEESARAN
Modified: 2022-11-10 17:34 UTC (History)
2 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2022-11-10 17:34:26 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Issue Tracker CNV-22384 0 None None None 2022-11-09 19:10:06 UTC

Description SATHEESARAN 2022-11-09 19:09:07 UTC
Description of problem:
------------------------
Attempt to set the TLS security profile for CNAO fails

Version-Release number of selected component (if applicable):
-------------------------------------------------------------
kubevirt-hyperconverged-operator.4.12.0-684

How reproducible:
-----------------
Always

Steps to Reproduce:
-------------------
1. Apply HCO jsonpatch annotation to update TLS security profile for CNAO

# oc annotate --overwrite -n openshift-cnv hco kubevirt-hyperconverged networkaddonsconfigs.kubevirt.io/jsonpatch='[{"op": "replace", "path": "/spec/tlsSecurityProfile", "value": {"old":{}, "type": "Old"}}]'

2. Get the TLS security profile set on CNAO
# oc get networkaddonsconfig cluster -n openshift-cnv -ojsonpath={.spec.tlsSecurityProfile}

Actual results:
---------------
CNAO has got incorrect definition for 'tlsSecurityProfile' as:
[cnv-qe-jenkins@ ~]$ oc get networkaddonsconfig cluster -n openshift-cnv -ojsonpath={.spec.tlsSecurityProfile}
{"intermediate":{},"old":{},"type":"Old"}[

Expected results:
-----------------
CNAO should contain the right definition ( not the mix of 2 TLS profiles ) for TLS security profile.
{"old":{}, "type": "Old"}

Additional info:
----------------
Also tested with 'Custom' TLS profile and still there is a mix of 'intermediate' TLS profile with the 'Custom' profile

Comment 1 Simone Tiraboschi 2022-11-10 17:34:26 UTC

*** This bug has been marked as a duplicate of bug 2141399 ***


Note You need to log in before you can comment on or make changes to this bug.