update-certSANs template's command kubeadm config view command is deprecated

Bug #1955830 reported by Rafael Lucas Camargos
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
StarlingX
Fix Released
Medium
Rafael Lucas Camargos

Bug Description

Brief Description
-----------------
The kubeadm config view command, which is used to update apiserver certificate's SANs when OAM IP change became deprecated in k8s v1.19 and was removed in k8s v1.22 as reported on https://github.com/kubernetes/kubeadm/issues/2203. Meaning that it needs to be updated as we move forward to a newer Kubernetes version.

Severity
--------
Minor

Steps to Reproduce
------------------
To display the deprecation warning, run kubeadm config view.

To trigger the update-certSANs template, change the OAM IP with system oam-modify as described in https://docs.starlingx.io/system_configuration/kubernetes/changing-the-oam-ip-configuration-using-the-cli.html

Expected Behavior
------------------
kubeadm config view should run fine.

Actual Behavior
----------------
kubeadm config view shows a deprecation warning.

Reproducibility
---------------
100%

System Configuration
--------------------
Any

Branch/Pull Time/Commit
-----------------------
2021-12-21

Last Pass
---------
N/A

Timestamp/Logs
--------------
N/A

Test Activity
-------------
Developer Testing

Workaround
----------
N/A

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to stx-puppet (master)

Fix proposed to branch: master
Review: https://review.opendev.org/c/starlingx/stx-puppet/+/823022

Changed in starlingx:
status: New → In Progress
Ghada Khalil (gkhalil)
Changed in starlingx:
assignee: nobody → Rafael Lucas Camargos (rcamargo)
importance: Undecided → Low
tags: added: stx.7.0 stx.security
Revision history for this message
Ghada Khalil (gkhalil) wrote (last edit ):

screening: medium/ stx.7.0; required when moving to k8s 1.22 which is currently under consideration for stx.7.0

Changed in starlingx:
importance: Low → Medium
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to stx-puppet (master)

Reviewed: https://review.opendev.org/c/starlingx/stx-puppet/+/823022
Committed: https://opendev.org/starlingx/stx-puppet/commit/8c00193178fee9af26519ad4250019c5317822e9
Submitter: "Zuul (22348)"
Branch: master

commit 8c00193178fee9af26519ad4250019c5317822e9
Author: Rafael Camargos <email address hidden>
Date: Mon Dec 27 12:01:39 2021 -0300

    Update kubeadm config view in update certSANs

    The command kubeadm config view became deprecated in k8s v1.19 and was
    removed in k8s v1.22 as reported on
    https://github.com/kubernetes/kubeadm/issues/2203.

    This work replaces this command with its equivalent kubectl replacement.

    Test Plan:

    PASS: Verify command `system oam-modify` changes the OAM IP successfully
    PASS: Verify advertise address isn't reset during OAM IP change

    Regression:

    PASS: Verify SX system install

    Closes-Bug: 1955830
    Signed-off-by: Rafael Camargos <email address hidden>
    Change-Id: I391a837c43a9836fc3007bc71dcbf313004eeb6e

Changed in starlingx:
status: In Progress → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.