After creating the service-parameter, the policies are not getting created in kube-apiserver process
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
StarlingX |
Fix Released
|
Medium
|
Jorge Saffe |
Bug Description
Brief Description
------------------
After creating the service-parameter, the policies are not getting created in kube-apiserver process
Severity
---------
Major
Steps to Reproduce
-------------------
1. Create k8s service parameter admission_
2. service-
3. Waiting for config-out-of-date alarms to clear
4. Verify PodSecurityPolicy added to the kube-apiserver process
Expected Behavior
------------------
enable-
--enable-
Actual Behavior
---------------
enable-
Reproducibility
-----------------
Reproducible
Changed in starlingx: | |
status: | New → In Progress |
tags: | added: stx.8.0 stx.config stx.containers |
Changed in starlingx: | |
importance: | Undecided → Medium |
assignee: | nobody → Jorge Saffe (jsaffe) |
Reviewed: https:/ /review. opendev. org/c/starlingx /stx-puppet/ +/862408 /opendev. org/starlingx/ stx-puppet/ commit/ 7ac49b1684810aa afc8f0fd7934c16 593a38b2d3
Committed: https:/
Submitter: "Zuul (22348)"
Branch: master
commit 7ac49b1684810aa afc8f0fd7934c16 593a38b2d3
Author: Jorge Saffe <email address hidden>
Date: Fri Oct 21 15:37:16 2022 -0400
Fix legacy service-parameter names integration in k8s custom
The K8s control plane component configuration can be updated parameter name "admission_plugins" must be admission- plugins"
via service parameters. There are some service parameter
names used in earlier versions (legacy) that are different
from the current valid k8s parameter names, so a translation
must be done for compatibility reasons. For example
service-
translated to "enable-
When the user uses legacy service parameter names to set k8s
parameters, the updating script discards them wrongly
during the cleanup step.
The changes introduced move the translation of parameter
names (to the accepted k8s format) after the parameters
are loaded from hieradata.yaml, so the rest of the script
is abstracted from the legacy service-parameter nomenclature.
Test Plan:
* CENTOS and DEBIAN distro:
- Fresh Install with AIO-SX and DX/STD.
- Add parameter with old service-parameter nomenclature.
- Apply changes on kubernetes service.
- Verify cluster health and configuration.
Closes-Bug: 1993842
Closes-Bug: 1993748
Signed-off-by: Jorge Saffe <email address hidden> 2fa6be213dc63f5 945a1efeb3d
Change-Id: I0f789b3b8ce105