Skip to content

Backport of Fix parts of admin-partitions guide into release/1.15.x#19624

Merged
hc-github-team-consul-core merged 1 commit into
release/1.15.xfrom
backport/jjtimmosn/fix-admin-partitions-doc/indirectly-suited-wolf
Nov 14, 2023
Merged

Backport of Fix parts of admin-partitions guide into release/1.15.x#19624
hc-github-team-consul-core merged 1 commit into
release/1.15.xfrom
backport/jjtimmosn/fix-admin-partitions-doc/indirectly-suited-wolf

Conversation

@hc-github-team-consul-core
Copy link
Copy Markdown
Collaborator

Backport

This PR is auto-generated from #19621 to be assessed for backporting due to the inclusion of the label backport/1.15.

The below text is copied from the body of the original PR.


Description

This fixes some of the admin partitions guide. It still does not work for Kind for a couple reasons:

  1. we need to use the internal IP of the K8s API (not the external LoadBalanced one):
# not
kubectl config view --output "jsonpath={.clusters[?(@.name=='${CLIENT_CONTEXT}')].cluster.server}"
  1. we get TLS issues on the K8s server certs:
2023-11-14T02:56:54.305Z [ERROR] consul-server-connection-manager: ACL auth method login failed: error="rpc error: code = Unauthenticated desc = Post \"https://10.96.0.1/apis/authentication.k8s.io/v1/tokenreviews\": tls: failed to verify certificate: x509: certificate signed by unknown authority (possibly because of \"crypto/rsa: verification error\" while trying to verify candidate authority certificate \"kubernetes\")"
2023-11-14T02:56:54.305Z [ERROR] consul-server-connection-manager: connection error: error="rpc error: code = Unauthenticated desc = Post \"https://10.96.0.1/apis/authentication.k8s.io/v1/tokenreviews\": tls: failed to verify certificate: x509: certificate signed by unknown authority (possibly because of \"crypto/rsa: verification error\" while trying to verify candidate authority certificate \"kubernetes\")"
unable to start Consul server watcher: context canceled

Testing & Reproduction steps

Links

PR Checklist

  • updated test coverage
  • external facing docs updated
  • appropriate backport labels added
  • not a security concern

Overview of commits

@hc-github-team-consul-core hc-github-team-consul-core requested a review from a team as a code owner November 14, 2023 14:41
@hc-github-team-consul-core hc-github-team-consul-core force-pushed the backport/jjtimmosn/fix-admin-partitions-doc/indirectly-suited-wolf branch from e7c5029 to 7b1b97d Compare November 14, 2023 14:41
@hc-github-team-consul-core hc-github-team-consul-core force-pushed the backport/jjtimmosn/fix-admin-partitions-doc/indirectly-suited-wolf branch from e14ecb5 to ab50dfe Compare November 14, 2023 14:41
@github-actions github-actions Bot added the type/docs Documentation needs to be created/updated/clarified label Nov 14, 2023
Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Auto approved Consul Bot automated PR

@hc-github-team-consul-core
Copy link
Copy Markdown
Collaborator Author

🤔 This PR has changes in the website/ directory but does not have a type/docs-cherrypick label. If the changes are for the next version, this can be ignored. If they are updates to current docs, attach the label to auto cherrypick to the stable-website branch after merging.

@hc-github-team-consul-core hc-github-team-consul-core merged commit 02c1460 into release/1.15.x Nov 14, 2023
@hc-github-team-consul-core hc-github-team-consul-core deleted the backport/jjtimmosn/fix-admin-partitions-doc/indirectly-suited-wolf branch November 14, 2023 14:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

type/docs Documentation needs to be created/updated/clarified

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants