ansible / ansible/eda-server-operator
API initContainer fails if Bundle CA is configured
- Dominant language
- Jinja
- Stars
- 45
- Forks
- 41
- Avg merge
- 2d
- Merged PRs (30d)
- 1
Description
If the Bundle CA secret is configured, the conditional initContainer to update-ca-trust fails with the following error. Something must have changed in the eda-server image.
```
$ oc logs -f eda-api-cfcd6d6b9-tj2mt -c configure-bundle-ca-cert
ln: failed to create symbolic link '/etc/pki/ca-trust/extracted/pem/directory-hash/ca-certificates.crt': Permission denied
```
Contributor guide
Research direction
Inspect the API initContainer configuration that handles the Bundle CA secret and the eda-server image it runs. Reproduce the failure with the Bundle CA configured and examine the reported permission error; done means the initContainer completes and the CA is available without the symbolic-link failure.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- kubernetes
- Domain
- infrastructure
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100