OpenStack External cloud provider configuration does not reference correct OpenStack certificate path
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Kubernetes Control Plane Charm |
Fix Released
|
High
|
Cory Johns |
Bug Description
Testing OpenStack Rocky with Kubernetes 1.14 using edge charms to test external cloud provider support for Octavia load balancers.
Using edge charm versions kubernetes-
With these charms and with an SSL enabled OpenStack, the cluster doesn't really form - the openstack-
This is happening because the cloud controller manager can't find the openstack ca cert:
I0815 07:55:37.035804 1 serving.go:319] Generated self-signed cert in-memory
W0815 07:55:37.432173 1 client_
I0815 07:55:37.436745 1 controllermanag
W0815 07:55:37.436774 1 plugins.go:118] WARNING: openstack built-in cloud provider is now deprecated. Please use 'external' cloud provider for openstack: https:/
I0815 07:55:37.437128 1 openstack.go:236] New openstack client created failed with config
F0815 07:55:37.437143 1 controllermanag
The issue that the cloud-config secret contains the following path to the CA cert:
[Global]
auth-url = https:/
...
ca-file = /etc/kubernetes
whereas the pod config is mounting the cloud-config secret at /etc/config, therefore I think the ca-file will actually be at /etc/config/
Manually editing the embedded cloud.conf file in the cloud-config secret (generated by the kubernetes-common layer of the charm) to specify the ca path to ca-file = /etc/config/
The issue appears to be this line: https:/
Changed in charm-kubernetes-master: | |
assignee: | nobody → Cory Johns (johnsca) |
status: | New → Triaged |
importance: | Undecided → High |
Changed in charm-kubernetes-master: | |
milestone: | none → 1.15+ck2 |
status: | Triaged → Fix Committed |
Changed in charm-kubernetes-master: | |
milestone: | 1.15+ck2 → 1.16 |
Changed in charm-kubernetes-master: | |
status: | Fix Committed → Fix Released |
Pull request created here https:/ /github. com/charmed- kubernetes/ layer-kubernete s-common/ pull/5