-
Notifications
You must be signed in to change notification settings - Fork 1.8k
"Redeploying Master Certificates Only" recreates "Service Serving Certificates" CA Certificate #8373
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
The playbook name should not be changed. The previous one is correct for ocp-3.9.
What we may need to improve is "redeploy-master-certificates.yml playbook" in line380, for more specifically, we should name it as "master redeploy-certificates.yml playbook".
So is in line 402 and line 421, which should be:
The etcd redeploy-certificates.yml playbook
The node redeploy-certificates.yml playbook
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This part lgtm 👍
|
@gpei I changed the |
|
@mburke5678 For 3.7 and previous version, the playbook used for redeploying master cert is |
|
@gpei Does this look good to merge to 3.9 and 3.10? |
|
@mburke5678 sorry, I'm not able to catch any new changes in this PR. |
|
@openshift/team-documentation PTAL Small change |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
executing should be running
certificate/key pairs should be certificates or key pairs
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
containing should be that contain
Is there another way to say "service serving certificates?"
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@kalexand-rh It appears that "service serving certificates" was the term when the feature was added to OpenShift.
https://github.com/openshift/openshift-docs/pull/2324/files
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@mburke5678, that's fair. A bit confusing still, but fair. :)
|
/cherrypick enterprise-3.9 |
|
@mburke5678: new pull request created: #8746 In response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. |
|
/cherrypick enterprise-3.10 |
|
@mburke5678: new pull request created: #8747 In response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. |
https://bugzilla.redhat.com/show_bug.cgi?id=1550250