Verification procedure in downstream/modules/platform/proc-configuring-controller-ldap-security.adoc not correct
- Dominant language
- No language data
- Stars
- 26
- Forks
- 72
- Avg merge
- 10h 3m
- Merged PRs (30d)
- 17
Description
The document proc-configuring-controller-ldap-security.adoc describes a verification procedure. The `openssl x509 -in /etc/pki/tls/certs/bundle-ca.crt -noout -text` command used there cannot work this way. According to the deployment, the created secret is mounted in `/etc/pki/ca-trust/extracted` in the init container:
```
initContainers:
- name: configure-bundle-ca-cert
image: 'registry.redhat.io/ansible-automation-platform-25/gateway-rhel8@sha256:10c79502d33e6061e5038a66abdf45dcec555b3cc75c60f81935be53bb72cc80'
command:
- /bin/sh
- '-c'
- |
mkdir -p /etc/pki/ca-trust/extracted/{java,pem,openssl,edk2}
update-ca-trust
resources:
requests:
cpu: 50m
memory: 750Mi
volumeMounts:
- name: ca-trust-extracted
mountPath: /etc/pki/ca-trust/extracted
- name: aap-ocppoc-gateway-bundle-cacert
readOnly: true
mountPath: /etc/pki/ca-trust/source/anchors/bundle-ca.crt
subPath: bundle-ca.crt
```
It is never available in `/etc/pki/tls/certs/bundle-ca.crt`
Perhaps you should change the verification to `openssl x509 -in /etc/pki/ca-trust/source/anchors/bundle-ca.crt -noout -text` ?
Contributor guide
No contributing guide indexed for this repository
Research direction
Open downstream/modules/platform/proc-configuring-controller-ldap-security.adoc and review the verification procedure against the init-container deployment shown in the issue. Confirm the certificate path used by the command matches the mounted location, then check that the document contains no remaining reference to the unavailable path.
Written by the indexing model from the issue text.
Assessment
- Domain
- documentation
- Issue type
- Documentation
- Difficulty
- 1/5
- Estimated time
- Under an hour
- Activity status
- Stale
- Clarity
- Clearly specified
- Newbie friendliness
- 55/100