summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorRich Megginson <rmeggins@redhat.com>2017-03-09 15:59:06 -0700
committerRich Megginson <rmeggins@redhat.com>2017-03-09 15:59:10 -0700
commitbc3042fbb66f6a231056d665f2f82cdc6f6d4a3b (patch)
tree1e487f83e9a824769db41a84ba3c3713c9eebe12
parent28127183106236c332e15d81fce3c6d76768a619 (diff)
downloadopenshift-bc3042fbb66f6a231056d665f2f82cdc6f6d4a3b.tar.gz
openshift-bc3042fbb66f6a231056d665f2f82cdc6f6d4a3b.tar.bz2
openshift-bc3042fbb66f6a231056d665f2f82cdc6f6d4a3b.tar.xz
openshift-bc3042fbb66f6a231056d665f2f82cdc6f6d4a3b.zip
Bug 1428711 - [IntService_public_324] ES pod is unable to read searchguard.truststore after upgarde logging from 3.3.1 to 3.5.0
https://bugzilla.redhat.com/show_bug.cgi?id=1428711 The list of secrets for elasticsearch was missing searchguard.truststore
-rw-r--r--roles/openshift_logging/tasks/generate_secrets.yaml2
1 files changed, 1 insertions, 1 deletions
diff --git a/roles/openshift_logging/tasks/generate_secrets.yaml b/roles/openshift_logging/tasks/generate_secrets.yaml
index 81fac8b5e..0f8e7ae58 100644
--- a/roles/openshift_logging/tasks/generate_secrets.yaml
+++ b/roles/openshift_logging/tasks/generate_secrets.yaml
@@ -64,7 +64,7 @@
admin-ca={{generated_certs_dir}}/ca.crt admin.jks={{generated_certs_dir}}/system.admin.jks -o yaml
vars:
secret_name: logging-elasticsearch
- secret_keys: ["admin-cert", "searchguard.key", "admin-ca", "key", "truststore", "admin-key"]
+ secret_keys: ["admin-cert", "searchguard.key", "admin-ca", "key", "truststore", "admin-key", "searchguard.truststore"]
register: logging_es_secret
when: secret_name not in openshift_logging_facts.elasticsearch.secrets or
secret_keys | difference(openshift_logging_facts.elasticsearch.secrets["{{secret_name}}"]["keys"]) | length != 0