Documentation: Instructions to update vSphere thumbprint
- Dominant language
- Go
- Stars
- 2.1k
- Forks
- 328
- Avg merge
- 1d 4h
- Merged PRs (30d)
- 9
Description
**What would you like to be added**:
When vSphere certificate is updated and Thumbprint has changed, we need instructions on how to reflect new thumbprint in EKSA Cluster to update new nodes if any existing nodes are deleted.
**Why is this needed**:
When thumbprint is changed for vCenter, new nodes cannot be added for existing EKS A Clusters.
- kubectl get [validatingwebhookconfigurations.admissionregistration.k8s.io]
(http://validatingwebhookconfigurations.admissionregistration.k8s.io/) capv-validating-webhook-configuration -o yaml > backup-capv-webhook.yaml
- kubectl get [validatingwebhookconfigurations.admissionregistration.k8s.io](http://validatingwebhookconfigurations.admissionregistration.k8s.io/) eksa-validating-webhook-configuration -o yaml > backup-eksa-webhook.yaml
- kubectl delete [validatingwebhookconfigurations.admissionregistration.k8s.io](http://validatingwebhookconfigurations.admissionregistration.k8s.io/) eksa-validating-webhook-configuration
- kubectl delete [validatingwebhookconfigurations.admissionregistration.k8s.io](http://validatingwebhookconfigurations.admissionregistration.k8s.io/) capv-validating-webhook-configuration
- kubectl edit [vspheredatacenterconfigs.anywhere.eks.amazonaws.com](http://vspheredatacenterconfigs.anywhere.eks.amazonaws.com/)
- Modify the spec.thumbprint to have the new values. Repeat for all the vspheredatacenterconfigs.
- kubectl edit [vspheremachinetemplates.infrastructure.cluster.x-k8s.io](http://vspheremachinetemplates.infrastructure.cluster.x-k8s.io/) -n eksa-system
- Modify the spec.template.spec.thumbprint to have the new value.
- kubectl edit configmaps -n kube-system vsphere-cloud-config
- Modify all entries of thumbprint in the configmap.
- This should resolve the issues with connecting to vsphere and bring the cluster back to a happy state. After which we can upgrade the cluster.
Contributor guide
Research direction
Start by locating the vSphere certificate or thumbprint documentation and compare it with the listed kubectl commands for validating webhook configurations, VSphereDataCenterConfigs, VSphereMachineTemplates, and the kube-system vsphere-cloud-config ConfigMap. Document the recovery procedure and verify that it explains updating every relevant thumbprint and restoring the cluster before an upgrade.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- kubernetes
- Domain
- documentation, infrastructure
- Issue type
- Documentation
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 45/100