aws / aws/eks-anywhere

Documentation: Instructions to update vSphere thumbprint

Open
#7,018 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Go
Stars
2.1k
Forks
328
Avg merge
1d 4h
Merged PRs (30d)
9

Description

**What would you like to be added**:

When vSphere certificate is updated and Thumbprint has changed, we need instructions on how to reflect new thumbprint in EKSA Cluster to update new nodes if any existing nodes are deleted.

**Why is this needed**:
When thumbprint is changed for vCenter, new nodes cannot be added for existing EKS A Clusters.

- kubectl get [validatingwebhookconfigurations.admissionregistration.k8s.io]
(http://validatingwebhookconfigurations.admissionregistration.k8s.io/) capv-validating-webhook-configuration -o yaml > backup-capv-webhook.yaml

- kubectl get [validatingwebhookconfigurations.admissionregistration.k8s.io](http://validatingwebhookconfigurations.admissionregistration.k8s.io/) eksa-validating-webhook-configuration -o yaml > backup-eksa-webhook.yaml

- kubectl delete [validatingwebhookconfigurations.admissionregistration.k8s.io](http://validatingwebhookconfigurations.admissionregistration.k8s.io/) eksa-validating-webhook-configuration

- kubectl delete [validatingwebhookconfigurations.admissionregistration.k8s.io](http://validatingwebhookconfigurations.admissionregistration.k8s.io/) capv-validating-webhook-configuration

- kubectl edit [vspheredatacenterconfigs.anywhere.eks.amazonaws.com](http://vspheredatacenterconfigs.anywhere.eks.amazonaws.com/)

- Modify the spec.thumbprint to have the new values. Repeat for all the vspheredatacenterconfigs.

- kubectl edit [vspheremachinetemplates.infrastructure.cluster.x-k8s.io](http://vspheremachinetemplates.infrastructure.cluster.x-k8s.io/) -n eksa-system

- Modify the spec.template.spec.thumbprint to have the new value.

- kubectl edit configmaps -n kube-system vsphere-cloud-config

- Modify all entries of thumbprint in the configmap.

- This should resolve the issues with connecting to vsphere and bring the cluster back to a happy state. After which we can upgrade the cluster.

Contributor guide

Open the contributing guide

Research direction

Start by locating the vSphere certificate or thumbprint documentation and compare it with the listed kubectl commands for validating webhook configurations, VSphereDataCenterConfigs, VSphereMachineTemplates, and the kube-system vsphere-cloud-config ConfigMap. Document the recovery procedure and verify that it explains updating every relevant thumbprint and restoring the cluster before an upgrade.

Written by the indexing model from the issue text.

Assessment

Tech stack
kubernetes
Domain
documentation, infrastructure
Issue type
Documentation
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.