-
Notifications
You must be signed in to change notification settings - Fork 341
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Use new method in check to prevent removal of last KRA #5908
Conversation
efd8298
to
03bce90
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
hi @rcritten thanks for the contribution, could you please have a look at my comments?
/azp run |
Azure Pipelines successfully started running 1 pipeline(s). |
It previously used a vault connection to determine if any KRA servers were installed. This would fail if the last KRA was not available. Use server roles instead to determine if the last KRA server is to be removed. https://pagure.io/freeipa/issue/8397 Signed-off-by: Rob Crittenden <rcritten@redhat.com>
/azp run |
Azure Pipelines successfully started running 1 pipeline(s). |
/azp run |
Azure Pipelines successfully started running 1 pipeline(s). |
Use the new role-based mechanism, one that doesn't rely on direct communication to the server, to determine whether the server being removed by `ipa server-del` contains the last KRA server. https://pagure.io/freeipa/issue/8397 Signed-off-by: Rob Crittenden <rcritten@redhat.com>
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
ACK for when CI passes. Please post the link to a green CI run and remove the temp commit, I'll add the ACK.
Green CI run |
@rcritten from my PoV you can remove the temp commit to start gating instead. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
ACK
It previously used a vault connection to determine if any
KRA servers were installed. This would fail if the last KRA
was not available.
Use server roles instead to determine if the last KRA server
is to be removed.
https://pagure.io/freeipa/issue/8397
Signed-off-by: Rob Crittenden rcritten@redhat.com