Deprecated Kubernetes API present in oidc-client Helm chart

Bug #2060055 reported by João Victor Portal
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
StarlingX
Fix Released
Low
João Victor Portal

Bug Description

Brief Description
-----------------
At https://opendev.org/starlingx/oidc-auth-armada-app/src/commit/b013dc140173508d4012279e2f6b6cdb2eb7d64f/stx-oidc-auth-helm/stx-oidc-auth-helm/helm-charts/oidc-client/templates/ingress.yaml#L10, it is being used the deprecated Kubernetes API "extensions/v1beta1" (see https://kubernetes.io/docs/reference/using-api/deprecation-guide/#ingress-v122). This API is no longer supported as of Kubernetes version 1.22 and it should be replaced by "networking.k8s.io/v1".

The configuration related to this deprecated API is usually not activated in configured OIDC apps because the default value of ".Values.ingress.enabled" is false (see https://opendev.org/starlingx/oidc-auth-armada-app/src/commit/b013dc140173508d4012279e2f6b6cdb2eb7d64f/stx-oidc-auth-helm/stx-oidc-auth-helm/helm-charts/oidc-client/values.yaml#L38) and it is not changed using overrides by the recommended configuration (see https://docs.starlingx.io/security/kubernetes/configure-oidc-auth-applications.html).

Severity
--------
Minor.

Steps to Reproduce
------------------
Inspect file "stx-oidc-auth-helm/stx-oidc-auth-helm/helm-charts/oidc-client/templates/ingress.yaml" of "oidc-auth-armada-app" repository.

Expected Behavior
------------------
No deprecated APIs should be present.

Actual Behavior
----------------
The deprecated API "extensions/v1beta1" is present.

Reproducibility
---------------
100% Reproducible.

System Configuration
--------------------
NA.

Branch/Pull Time/Commit
-----------------------
NA.

Last Pass
---------
NA.

Timestamp/Logs
--------------
NA.

Test Activity
-------------
NA.

Workaround
----------
NA.

Changed in starlingx:
assignee: nobody → João Victor Portal (jvictorp)
Changed in starlingx:
status: New → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to oidc-auth-armada-app (master)

Reviewed: https://review.opendev.org/c/starlingx/oidc-auth-armada-app/+/914814
Committed: https://opendev.org/starlingx/oidc-auth-armada-app/commit/9c337fe0c91873870db875c6e5f53d1678507813
Submitter: "Zuul (22348)"
Branch: master

commit 9c337fe0c91873870db875c6e5f53d1678507813
Author: Joao Victor Portal <email address hidden>
Date: Mon Apr 1 12:21:19 2024 -0300

    Remove ingress configuration from OIDC client

    The ingress configuration of OIDC client was never used and there are
    no valid use cases involving it. The implementation contains the
    deprecated Kubernetes API "extensions/v1beta1", but instead of fixing
    it, the implementation will be removed.

    Test Plan:

    PASS: Successfully compile a new OIDC app tarball, upload it to an
    AIO-SX environment and test OIDC app functionality.

    Closes-Bug: 2060055

    Change-Id: I22196dc3434113340c73b5918b7a716785fb6463
    Signed-off-by: Joao Victor Portal <email address hidden>

Changed in starlingx:
status: In Progress → Fix Released
Ghada Khalil (gkhalil)
Changed in starlingx:
importance: Undecided → Low
tags: added: stx.10.0 stx.apps
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.