bug 1639080 clarifying insecure connection override

[kalexand-rh]

https://bugzilla.redhat.com/show_bug.cgi?id=1639080

@ericavonb, how does this sound?

@jianlinliu, will you PTAL?

This bug was filed against 3.10 - do you know how far back this change is true?

[openshift-docs-preview-bot]

The preview will be availble shortly at:

• install_config/syncing_groups_with_ldap.adoc: https://BZ1639080--ocpdocs.netlify.com/openshift-enterprise/latest/install_config/syncing_groups_with_ldap.html

[ericavonb]

@kalexand-rh lgtm!

[kalexand-rh]

@stuartchuan, PTAL?

[stuartchuan]

As I understand, when set the insecure: true and the url scheme is ldap, loading the config should ignore the ca no matter what's setting for the ca field.

[kalexand-rh]

@stuartchuan, the bug says that it's taking effect anyway.

[kalexand-rh]

@stuartchuan, will you PTAL?

[stuartchuan]

I still think this is not the root cause fix, just a workaround. I think the bug should be fixed in code but not doc.
@ericavonb what do you think?

[kalexand-rh]

@ericavonb, when you have a minute, will you PTAL?

[ericavonb]

@kalexand-rh @stuartchuan I think this is the correct behavior (with the docs here) in accord with the standards around ldap urls and tls.

[kalexand-rh]

Thanks @ericavonb. @stuartchuan, if this is correct, can I merge this to 3.10 and 3.11?

[stuartchuan]

@kalexand-rh it's OK to merge.

[kalexand-rh]

Thanks! Merging.

[kalexand-rh]

/cherrypick enterprise-3.11

[kalexand-rh]

/cherrypick enterprise-3.10

[openshift-cherrypick-robot]

@kalexand-rh: new pull request created: #12995

In response to this:

/cherrypick enterprise-3.11

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

[openshift-cherrypick-robot]

@kalexand-rh: new pull request created: #12996

In response to this:

/cherrypick enterprise-3.10

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.