-
Notifications
You must be signed in to change notification settings - Fork 29
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[DNM] Fix ironic-python-agent - CA bundle inject #506
base: main
Are you sure you want to change the base?
Conversation
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: hjensas The full list of commands accepted by this bot can be found here. The pull request process is described here
Needs approval from an approver in each of these files:
Approvers can indicate their approval by writing |
60436cd
to
aba8781
Compare
do we need this? our big ca bundle already has the internal-ca-bundle included. |
Thanks Martin! We are injecting that (or atleast we intend to) since: #491 also after looking more at the lib-common, I think this patch would actually just mount the big ca bundle again under a different name. Anyhow ... I'll go back to figuring out the root cause. |
Jira: OSPRH-12526
@hjensas: The following test failed, say
Full PR test history. Your PR dashboard. Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here. |
The ironic-python-agent needs the internal-ca-bundle.pem.Add a volume mount for the internal-ca-bundle.pem as well and update the pxe-init script to copy both certificates to the ramdisk image.Turns out the above is wrong, I will update this once I have found the actual root case.
Jira: OSPRH-12526