Skip to content

Commit

Permalink
Removed appending to ca.cart
Browse files Browse the repository at this point in the history
Appending to ca.crt in make-cert-client.sh (introduced in #724203) causes
multiple identical ca certs being added into /etc/kubernetes/certs/ca.crt which
prevents kube-controller-manager from starting with following error:

'expected 1 certificate, found X'

Task: 45392
Story: 2010042

Change-Id: I5ca9cb8c7afb1ce9cb1a337a9fe2faf3fab3ba61
(cherry picked from commit 2c2dfeb)
  • Loading branch information
darmach authored and seunghun1ee committed Jul 1, 2024
1 parent 86d284d commit 1994919
Showing 1 changed file with 1 addition and 1 deletion.
Original file line number Diff line number Diff line change
Expand Up @@ -82,7 +82,7 @@ EOF
curl $VERIFY_CA -X GET \
-H "X-Auth-Token: $USER_TOKEN" \
-H "OpenStack-API-Version: container-infra latest" \
$MAGNUM_URL/certificates/$CLUSTER_UUID | python -c 'import sys, json; print(json.load(sys.stdin)["pem"])' >> $CA_CERT
$MAGNUM_URL/certificates/$CLUSTER_UUID | python -c 'import sys, json; print(json.load(sys.stdin)["pem"])' > $CA_CERT

# Generate client's private key and csr
$ssh_cmd openssl genrsa -out "${_KEY}" 4096
Expand Down

0 comments on commit 1994919

Please sign in to comment.