Create ONVDB client certificate for Octavia #730
Conversation
|
Build failed (check pipeline). Post https://review.rdoproject.org/zuul/buildset/f04065a4e699450c9e06bc8d10f62e1a ❌ openstack-k8s-operators-content-provider FAILURE in 16m 36s |
| CertName: fmt.Sprintf("%s-ovndbs", serviceName), | ||
| Duration: nil, | ||
| Hostnames: []string{ | ||
| fmt.Sprintf("%s.%s.svc", serviceName, instance.Namespace), |
There was a problem hiding this comment.
Should this be a wildcard cert since the pod dns names are not predictable.
There was a problem hiding this comment.
I see some services like neutron not using the wildcard: https://github.com/openstack-k8s-operators/openstack-operator/blob/main/pkg/openstack/neutron.go#L73 (I based my code on it)
is it really useful here?
gthiemonge
force-pushed
the
octavia-ovn-certs
branch
from
8628e0b to
57faeb0
Compare
|
Build failed (check pipeline). Post https://review.rdoproject.org/zuul/buildset/0d8c98ed70404724ad2ed42dc2e6d282 ❌ openstack-k8s-operators-content-provider FAILURE in 9m 35s |
gthiemonge
force-pushed
the
octavia-ovn-certs
branch
from
57faeb0 to
7c1a97e
Compare
|
Merge Failed. This change or one of its cross-repo dependencies was unable to be automatically merged with the current state of its repository. Please rebase the change and upload a new patchset. |
gthiemonge
force-pushed
the
octavia-ovn-certs
branch
from
7c1a97e to
2b33e51
Compare
The certificate is required by the Octavia OVN provider when TLS is enabled at the Pod level. It also bumps of the version of octavia-operator Jira: OSPRH-6065
gthiemonge
force-pushed
the
octavia-ovn-certs
branch
from
2b33e51 to
bfd3eed
Compare
|
Build failed (check pipeline). Post https://review.rdoproject.org/zuul/buildset/79111a8227bf4d8882c95102dd3abae7 ✔️ openstack-k8s-operators-content-provider SUCCESS in 34m 32s |
|
recheck |
|
Build failed (check pipeline). Post https://review.rdoproject.org/zuul/buildset/d5f258121eef44588adb9641014b79d6 ✔️ openstack-k8s-operators-content-provider SUCCESS in 2h 50m 59s |
|
needs a rebase |
|
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: gthiemonge, stuggi The full list of commands accepted by this bot can be found here. The pull request process is described here
Needs approval from an approver in each of these files:
Approvers can indicate their approval by writing |
openshift-merge-bot
bot
merged commit 41031f2
into
openstack-k8s-operators:main
The certificate is required by the Octavia OVN provider when TLS is enabled at the Pod level.
Jira: OSPRH-6065