-
-
Notifications
You must be signed in to change notification settings - Fork 4
fix(tests): Smoke/ldap tests on openshift #800
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
maltesander
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM!
| securityContext: | ||
| fsGroup: 1000 |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@adwk67 this sadly broke the integration tests in https://testing.stackable.tech/job/opa-operator-it-weekly/109/consoleFull:
logger.go:42: 08:44:45 | smoke_opa-1.12.2_openshift-false_use-tls-true/30-prepare-test-opa | File "/usr/local/lib/python3.12/site-packages/requests/adapters.py", line 303, in cert_verify
logger.go:42: 08:44:45 | smoke_opa-1.12.2_openshift-false_use-tls-true/30-prepare-test-opa | raise OSError(
logger.go:42: 08:44:45 | smoke_opa-1.12.2_openshift-false_use-tls-true/30-prepare-test-opa | OSError: Could not find a suitable TLS CA certificate bundle, invalid path: /tls/ca.crt
logger.go:42: 08:44:45 | smoke_opa-1.12.2_openshift-false_use-tls-true/30-prepare-test-opa | command terminated with exit code 1
It's actually a permission problem:
bash-5.2$ ls -la /tls/
ls: cannot open directory '/tls/': Permission deniedThere was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thanks for highlighting this. PR is here: #802
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Omitting that permission caused the issue on k3s for some reason, but not elsewhere.
Description
Tested on Openshift:
Tested on KinD:
Definition of Done Checklist
Author
Reviewer
Acceptance
type/deprecationlabel & add to the deprecation scheduletype/experimentallabel & add to the experimental features tracker