ansible / ansible/aap-docs

Verification procedure in downstream/modules/platform/proc-configuring-controller-ldap-security.adoc not correct

Open
#3,833 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
No language data
Stars
26
Forks
72
Avg merge
10h 3m
Merged PRs (30d)
17

Description

The document proc-configuring-controller-ldap-security.adoc describes a verification procedure. The `openssl x509 -in /etc/pki/tls/certs/bundle-ca.crt -noout -text` command used there cannot work this way. According to the deployment, the created secret is mounted in `/etc/pki/ca-trust/extracted` in the init container:

```
initContainers:
- name: configure-bundle-ca-cert
image: 'registry.redhat.io/ansible-automation-platform-25/gateway-rhel8@sha256:10c79502d33e6061e5038a66abdf45dcec555b3cc75c60f81935be53bb72cc80'
command:
- /bin/sh
- '-c'
- |
mkdir -p /etc/pki/ca-trust/extracted/{java,pem,openssl,edk2}
update-ca-trust
resources:
requests:
cpu: 50m
memory: 750Mi
volumeMounts:
- name: ca-trust-extracted
mountPath: /etc/pki/ca-trust/extracted
- name: aap-ocppoc-gateway-bundle-cacert
readOnly: true
mountPath: /etc/pki/ca-trust/source/anchors/bundle-ca.crt
subPath: bundle-ca.crt
```

It is never available in `/etc/pki/tls/certs/bundle-ca.crt`

Perhaps you should change the verification to `openssl x509 -in /etc/pki/ca-trust/source/anchors/bundle-ca.crt -noout -text` ?

Contributor guide

No contributing guide indexed for this repository

Research direction

Open downstream/modules/platform/proc-configuring-controller-ldap-security.adoc and review the verification procedure against the init-container deployment shown in the issue. Confirm the certificate path used by the command matches the mounted location, then check that the document contains no remaining reference to the unavailable path.

Written by the indexing model from the issue text.

Assessment

Domain
documentation
Issue type
Documentation
Difficulty
1/5
Estimated time
Under an hour
Activity status
Stale
Clarity
Clearly specified
Newbie friendliness
55/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.