Strip cluster CA certificate from blank lines

Bug #1775342 reported by Spyros Trigazis
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Magnum
Fix Released
Medium
Unassigned

Bug Description

When a client retrieves a CA certificate from the magnum api, the string that is returned contains a blank line at the end. Some clients, namely the java kubernetes client fail to parse the ca certificate mounted in the pods.

https://github.com/apache-spark-on-k8s/spark/issues/622

Changed in magnum:
importance: Undecided → Medium
status: New → Confirmed
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to magnum (master)

Reviewed: https://review.openstack.org/572755
Committed: https://git.openstack.org/cgit/openstack/magnum/commit/?id=edee7030e4deee4e95e68daa1623ea305ce202e5
Submitter: Zuul
Branch: master

commit edee7030e4deee4e95e68daa1623ea305ce202e5
Author: Piotr Mrowczynski <email address hidden>
Date: Fri May 25 12:29:38 2018 +0200

    Strip signed certificate

    Certificate (ca.crt) has to be striped for some application parsers
    as they might require pure base64 representation of
    certificate itself, without empty characters
    at the beginning nor the end of file

    Change-Id: I5f58e19d03abdf040b9a5b5df2f4dd83b4c0e3a9
    Closes-Bug: #1775342

Changed in magnum:
status: Confirmed → Fix Released
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to magnum (stable/queens)

Fix proposed to branch: stable/queens
Review: https://review.openstack.org/574167

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to magnum (stable/queens)

Reviewed: https://review.openstack.org/574167
Committed: https://git.openstack.org/cgit/openstack/magnum/commit/?id=ef5c1b8999c491517b3e2b861ac7ce85f65b7ea0
Submitter: Zuul
Branch: stable/queens

commit ef5c1b8999c491517b3e2b861ac7ce85f65b7ea0
Author: Piotr Mrowczynski <email address hidden>
Date: Fri May 25 12:29:38 2018 +0200

    Strip signed certificate

    Certificate (ca.crt) has to be striped for some application parsers
    as they might require pure base64 representation of
    certificate itself, without empty characters
    at the beginning nor the end of file

    Change-Id: I5f58e19d03abdf040b9a5b5df2f4dd83b4c0e3a9
    Closes-Bug: #1775342
    (cherry picked from commit edee7030e4deee4e95e68daa1623ea305ce202e5)

tags: added: in-stable-queens
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/magnum 7.0.0

This issue was fixed in the openstack/magnum 7.0.0 release.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/magnum 6.2.0

This issue was fixed in the openstack/magnum 6.2.0 release.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.