Skip to content

AGENT-537: Run agent installer command to create certificates#9574

Merged
openshift-merge-bot[bot] merged 1 commit intoopenshift:mainfrom
bfournie:agent-create-certs-service
Mar 22, 2025
Merged

AGENT-537: Run agent installer command to create certificates#9574
openshift-merge-bot[bot] merged 1 commit intoopenshift:mainfrom
bfournie:agent-create-certs-service

Conversation

@bfournie
Copy link
Copy Markdown
Contributor

If the agent tls certificates have not been created yet, i.e. when using the agent UI, use the installer command to create the certs prior to running the assisted-service.

Requires #9557

@openshift-ci-robot openshift-ci-robot added the jira/valid-reference Indicates that this PR references a valid Jira ticket of any type. label Mar 17, 2025
@openshift-ci-robot
Copy link
Copy Markdown
Contributor

openshift-ci-robot commented Mar 17, 2025

@bfournie: This pull request references AGENT-537 which is a valid jira issue.

Details

In response to this:

If the agent tls certificates have not been created yet, i.e. when using the agent UI, use the installer command to create the certs prior to running the assisted-service.

Requires #9557

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

@openshift-ci openshift-ci Bot requested review from pawanpinjarkar and zaneb March 17, 2025 23:56
@bfournie bfournie force-pushed the agent-create-certs-service branch from c042148 to bf8c7ac Compare March 19, 2025 14:44
Comment thread data/data/agent/files/usr/local/bin/set-node-zero.sh Outdated
@openshift-ci openshift-ci Bot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Mar 20, 2025
If the agent tls certificates have not been created yet, i.e.
when using the agent UI, use the installer command to create the
certs prior to running the assisted-service.
@bfournie bfournie force-pushed the agent-create-certs-service branch from bf8c7ac to 36ca6ca Compare March 20, 2025 13:32
@openshift-ci
Copy link
Copy Markdown
Contributor

openshift-ci Bot commented Mar 20, 2025

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: andfasano

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

# This allows the certs to be created at run-time, e.g. when installed via the UI
AGENT_TLS_DIR=/opt/agent/tls
if [ -z $(ls -A "$AGENT_TLS_DIR") ]; then
. /usr/local/bin/release-image.sh
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It could be worth echoing a message, to leave a trace in the journal that the certs have been lazily generated (for troubleshooting)

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Presumably the installer will log something.

Copy link
Copy Markdown
Member

@zaneb zaneb left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

/lgtm

# This allows the certs to be created at run-time, e.g. when installed via the UI
AGENT_TLS_DIR=/opt/agent/tls
if [ -z $(ls -A "$AGENT_TLS_DIR") ]; then
. /usr/local/bin/release-image.sh
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Presumably the installer will log something.

@openshift-ci openshift-ci Bot added the lgtm Indicates that a PR is ready to be merged. label Mar 21, 2025
@openshift-ci-robot
Copy link
Copy Markdown
Contributor

/retest-required

Remaining retests: 0 against base HEAD c0c6232 and 2 for PR HEAD 36ca6ca in total

@openshift-ci
Copy link
Copy Markdown
Contributor

openshift-ci Bot commented Mar 21, 2025

@bfournie: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
ci/prow/e2e-azure-ovn-resourcegroup 36ca6ca link false /test e2e-azure-ovn-resourcegroup
ci/prow/e2e-vsphere-ovn-multi-network 36ca6ca link false /test e2e-vsphere-ovn-multi-network
ci/prow/e2e-agent-compact-ipv4-appliance-diskimage 36ca6ca link false /test e2e-agent-compact-ipv4-appliance-diskimage
ci/prow/okd-scos-e2e-aws-ovn 36ca6ca link false /test okd-scos-e2e-aws-ovn

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

@bfournie
Copy link
Copy Markdown
Contributor Author

/override ci/prow/okd-scos-images

@bfournie
Copy link
Copy Markdown
Contributor Author

/retest-required

@openshift-ci
Copy link
Copy Markdown
Contributor

openshift-ci Bot commented Mar 21, 2025

@bfournie: Overrode contexts on behalf of bfournie: ci/prow/okd-scos-images

Details

In response to this:

/override ci/prow/okd-scos-images

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@bfournie
Copy link
Copy Markdown
Contributor Author

/label acknowledge-critical-fixes-only

@openshift-ci openshift-ci Bot added the acknowledge-critical-fixes-only Indicates if the issuer of the label is OK with the policy. label Mar 21, 2025
@openshift-ci-robot
Copy link
Copy Markdown
Contributor

/retest-required

Remaining retests: 0 against base HEAD 6e98328 and 1 for PR HEAD 36ca6ca in total

@bfournie
Copy link
Copy Markdown
Contributor Author

/override ci/prow/okd-scos-images

@openshift-ci
Copy link
Copy Markdown
Contributor

openshift-ci Bot commented Mar 21, 2025

@bfournie: Overrode contexts on behalf of bfournie: ci/prow/okd-scos-images

Details

In response to this:

/override ci/prow/okd-scos-images

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@openshift-merge-bot openshift-merge-bot Bot merged commit 5a7e9bf into openshift:main Mar 22, 2025
25 of 29 checks passed
@openshift-bot
Copy link
Copy Markdown
Contributor

[ART PR BUILD NOTIFIER]

Distgit: ose-installer-altinfra
This PR has been included in build ose-installer-altinfra-container-v4.19.0-202503220338.p0.g5a7e9bf.assembly.stream.el9.
All builds following this will include this PR.

@openshift-bot
Copy link
Copy Markdown
Contributor

[ART PR BUILD NOTIFIER]

Distgit: ose-installer-terraform-providers
This PR has been included in build ose-installer-terraform-providers-container-v4.19.0-202503220338.p0.g5a7e9bf.assembly.stream.el9.
All builds following this will include this PR.

@openshift-bot
Copy link
Copy Markdown
Contributor

[ART PR BUILD NOTIFIER]

Distgit: ose-baremetal-installer
This PR has been included in build ose-baremetal-installer-container-v4.19.0-202503220338.p0.g5a7e9bf.assembly.stream.el9.
All builds following this will include this PR.

@openshift-bot
Copy link
Copy Markdown
Contributor

[ART PR BUILD NOTIFIER]

Distgit: ose-installer-artifacts
This PR has been included in build ose-installer-artifacts-container-v4.19.0-202503220338.p0.g5a7e9bf.assembly.stream.el9.
All builds following this will include this PR.

@bfournie bfournie deleted the agent-create-certs-service branch March 22, 2025 13:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

acknowledge-critical-fixes-only Indicates if the issuer of the label is OK with the policy. approved Indicates a PR has been approved by an approver from all required OWNERS files. jira/valid-reference Indicates that this PR references a valid Jira ticket of any type. lgtm Indicates that a PR is ready to be merged.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants