Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

add full DNS name to mongo certificate #2340

Merged
merged 5 commits into from
Jan 20, 2025
Merged

Conversation

qpdpQ
Copy link
Contributor

@qpdpQ qpdpQ commented Jan 14, 2025

What this PR does / why we need it:
Update the Certificate icp-mongodb-client-cert in original namespace to include the DNS name mongodb.<original-ns>.svc.cluster.local
Which issue(s) this PR fixes:
Fixes # https://github.ibm.com/IBMPrivateCloud/roadmap/issues/65642

qpdpQ added 3 commits January 14, 2025 16:42
Signed-off-by: Allen Li <[email protected]>
Signed-off-by: Allen Li <[email protected]>
@qpdpQ
Copy link
Contributor Author

qpdpQ commented Jan 14, 2025

test

[✔] Cert manager is ready, preload can proceed.
[INFO] Adding full DNS name into icp-mongodb-client-cert certificate in ibm-common-services
[INFO] Updating icp-mongodb-client-cert certificate
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
certificate.cert-manager.io/icp-mongodb-client-cert patched
LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSURERENDQWZTZ0F3SUJBZ0lSQUpvTVZrbDVvd2tiNlFsK01IUFhHd1V3RFFZSktvWklodmNOQVFFTEJRQXcKRWpFUU1BNEdBMVVFQXhNSGJXOXVaMjlrWWpBZUZ3MHlOVEF4TVRReU1UUXhNemxhRncweU56QXhNVFF5TVRReApNemxhTUJveEdEQVdCZ05WQkFNVEQyMXZibWR2WkdJdGMyVnlkbWxqWlRDQ0FTSXdEUVlKS29aSWh2Y05BUUVCCkJRQURnZ0VQQURDQ0FRb0NnZ0VCQUxhK0JZOEw4YlVJRVpFclNXa0ZpN1F2a2tqYjMwZDlnZStFcFFGRGlLUlcKSDJaYXd5NTVNckl0cnRWN2NoKzFLMGVxbkFQWFM3SmtseTZ6L1JSdFkzSDVpUkcwTkVUdURvcW5WZUdpaUQ0RwoybEFpKzBTckZRRlNzc1dSTnVlUGJ6a0VBZStKLy8rcWM5eEQvRTN5ZXErNnBuWWhGczNKTHdXcXl1V3NqcHc2Cko0N05NcGNBMHlEVjEwd2Faa1ZoZzVGcnVZMkh0NWJZblloRFozZU8ybG94UURzR0h6dVVSQWIrQWhwOC91TjAKSkU0d2ZweHRyUEl3SVlsbzQ2UTNQbUZOeHkrVEVubmE5S25lZWtyWmNOOUdKL0FkdDNZd213dThYdzFIWjV2egp5ckdrWFBrZHZhRmxWalUzU1ZTaTlxNGJBRWRyMUdzWUJNRm5KZHM3ZS8wQ0F3RUFBYU5WTUZNd0RnWURWUjBQCkFRSC9CQVFEQWdXZ01Bd0dBMVVkRXdFQi93UUNNQUF3SHdZRFZSMGpCQmd3Rm9BVTJVc201eWZGTzJ3ckZYcVEKMzk2T28zUFI1R1F3RWdZRFZSMFJCQXN3Q1lJSGJXOXVaMjlrWWpBTkJna3Foa2lHOXcwQkFRc0ZBQU9DQVFFQQpDNzkzcmVOQnBsQmk2ZjJLandQRkJUbUdaVVo4NHZNTDFMRGF0ZDZwZUpNMk9OYXVqRERDeFlNdHNGVnpxenBFCmhITU0vdGxnck5FZXptbFlIRHJocFQ1eVNUVnBiNXU5N0hCQXFtZnFvb3pxV1FETkRuSUhiMlN4cU9XcUdTajYKQmVLMFdYL3lNcVRXa0xvR0xHZW9KWlQwTDljTDg5dFgwQVgrS0RsVERUTnpVTlpaeUhJOHZLRVhxSzhHT3VIagpuVHFEM1lqYlh6ejVrRmRUeXJPUjc1c2FWc2p0OEtXeDQyUE5yMEtuNHJMcjNubjdyWjRGdU5GYW1LSGxPWXBpCmJmYnhReW1oemY1K3MzOHdCN0syaFhLOFNPQndXVlFLbTBRMjNXTUpUTWszbExveTlJa2NXV1dldzJ5U0xTT1QKMFhDblNlb0JxZEtOb0pjWWRielNNUT09Ci0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K
Secret not refreshed, retrying in 10 seconds...
LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSURQVENDQWlXZ0F3SUJBZ0lSQUpzUlIxbkZtTUdBMnd4RmROZGxwNll3RFFZSktvWklodmNOQVFFTEJRQXcKRWpFUU1BNEdBMVVFQXhNSGJXOXVaMjlrWWpBZUZ3MHlOVEF4TVRReU1UUXhORGxhRncweU56QXhNVFF5TVRReApORGxhTUJveEdEQVdCZ05WQkFNVEQyMXZibWR2WkdJdGMyVnlkbWxqWlRDQ0FTSXdEUVlKS29aSWh2Y05BUUVCCkJRQURnZ0VQQURDQ0FRb0NnZ0VCQUxhK0JZOEw4YlVJRVpFclNXa0ZpN1F2a2tqYjMwZDlnZStFcFFGRGlLUlcKSDJaYXd5NTVNckl0cnRWN2NoKzFLMGVxbkFQWFM3SmtseTZ6L1JSdFkzSDVpUkcwTkVUdURvcW5WZUdpaUQ0RwoybEFpKzBTckZRRlNzc1dSTnVlUGJ6a0VBZStKLy8rcWM5eEQvRTN5ZXErNnBuWWhGczNKTHdXcXl1V3NqcHc2Cko0N05NcGNBMHlEVjEwd2Faa1ZoZzVGcnVZMkh0NWJZblloRFozZU8ybG94UURzR0h6dVVSQWIrQWhwOC91TjAKSkU0d2ZweHRyUEl3SVlsbzQ2UTNQbUZOeHkrVEVubmE5S25lZWtyWmNOOUdKL0FkdDNZd213dThYdzFIWjV2egp5ckdrWFBrZHZhRmxWalUzU1ZTaTlxNGJBRWRyMUdzWUJNRm5KZHM3ZS8wQ0F3RUFBYU9CaFRDQmdqQU9CZ05WCkhROEJBZjhFQkFNQ0JhQXdEQVlEVlIwVEFRSC9CQUl3QURBZkJnTlZIU01FR0RBV2dCVFpTeWJuSjhVN2JDc1YKZXBEZjNvNmpjOUhrWkRCQkJnTlZIUkVFT2pBNGdnZHRiMjVuYjJSaWdpMXRiMjVuYjJSaUxtbGliUzFqYjIxdApiMjR0YzJWeWRtbGpaWE11YzNaakxtTnNkWE4wWlhJdWJHOWpZV3d3RFFZSktvWklodmNOQVFFTEJRQURnZ0VCCkFEUVZSaDZ0RlE3T2F4akNQaWlMeng5VlB0VkxKR3JuTnk0RDNRWURjYy9YVmV4dklvVkpoL0QrVXNHQVQ1L1IKcy9TRlZLdWFPUCtNdWtCQXIraEliOHFVeWhFd2wyem4yejY4aW5NcFpWMnpRR3U2SnZuL0xwNUFvOXRRSXlYRApJWThhK3JweCtlMU9wRUFtWjFFSGllNCtWWTNubFlTbjBHOG9GdSt5eGdFMmRjbks4V1ZmY1pGbS9EdUFUQjQ0ClNGUXB1VFBGUUljQmZ2QVZPbzBVRXptUjdrNE9ySTlnOXc1M0Z3MEJCcklSQkRFek1uQ1RmWFNneDFzbmFYOHQKaFRYdXlWdjk0K0IrUGhCMWJweU0remgwckpCKy9DSVU1UU9aTFBHSGYrNVE1b2dzeVRkUldYTFpOSjBmWWszMQpyT1Z0TERkVlNjSU14algwSENMb05Ndz0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo=
Successfully patched certificate secret

tls.crt data will be remove from log

preload_data.sh Outdated Show resolved Hide resolved
qpdpQ added 2 commits January 15, 2025 14:49
Signed-off-by: Allen Li <[email protected]>
@qpdpQ qpdpQ requested a review from Daniel-Fan January 15, 2025 20:06
Copy link
Contributor

@Daniel-Fan Daniel-Fan left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

/lgtm

@ibm-ci-bot
Copy link
Collaborator

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: Daniel-Fan, qpdpQ

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@ibm-ci-bot ibm-ci-bot merged commit bfb7b17 into IBM:scripts-dev Jan 20, 2025
2 of 3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants