Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Backport of Fix parts of admin-partitions guide into release/1.15.x #19624

Conversation

hc-github-team-consul-core
Copy link
Contributor

Backport

This PR is auto-generated from #19621 to be assessed for backporting due to the inclusion of the label backport/1.15.

The below text is copied from the body of the original PR.


Description

This fixes some of the admin partitions guide. It still does not work for Kind for a couple reasons:

  1. we need to use the internal IP of the K8s API (not the external LoadBalanced one):
# not
kubectl config view --output "jsonpath={.clusters[?(@.name=='${CLIENT_CONTEXT}')].cluster.server}"
  1. we get TLS issues on the K8s server certs:
2023-11-14T02:56:54.305Z [ERROR] consul-server-connection-manager: ACL auth method login failed: error="rpc error: code = Unauthenticated desc = Post \"https://10.96.0.1/apis/authentication.k8s.io/v1/tokenreviews\": tls: failed to verify certificate: x509: certificate signed by unknown authority (possibly because of \"crypto/rsa: verification error\" while trying to verify candidate authority certificate \"kubernetes\")"
2023-11-14T02:56:54.305Z [ERROR] consul-server-connection-manager: connection error: error="rpc error: code = Unauthenticated desc = Post \"https://10.96.0.1/apis/authentication.k8s.io/v1/tokenreviews\": tls: failed to verify certificate: x509: certificate signed by unknown authority (possibly because of \"crypto/rsa: verification error\" while trying to verify candidate authority certificate \"kubernetes\")"
unable to start Consul server watcher: context canceled

Testing & Reproduction steps

Links

PR Checklist

  • updated test coverage
  • external facing docs updated
  • appropriate backport labels added
  • not a security concern

Overview of commits

@hc-github-team-consul-core hc-github-team-consul-core force-pushed the backport/jjtimmosn/fix-admin-partitions-doc/indirectly-suited-wolf branch from e7c5029 to 7b1b97d Compare November 14, 2023 14:41
@hc-github-team-consul-core hc-github-team-consul-core force-pushed the backport/jjtimmosn/fix-admin-partitions-doc/indirectly-suited-wolf branch from e14ecb5 to ab50dfe Compare November 14, 2023 14:41
@github-actions github-actions bot added the type/docs Documentation needs to be created/updated/clarified label Nov 14, 2023
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Auto approved Consul Bot automated PR

@hc-github-team-consul-core
Copy link
Contributor Author

🤔 This PR has changes in the website/ directory but does not have a type/docs-cherrypick label. If the changes are for the next version, this can be ignored. If they are updates to current docs, attach the label to auto cherrypick to the stable-website branch after merging.

@hc-github-team-consul-core hc-github-team-consul-core merged commit 02c1460 into release/1.15.x Nov 14, 2023
52 checks passed
@hc-github-team-consul-core hc-github-team-consul-core deleted the backport/jjtimmosn/fix-admin-partitions-doc/indirectly-suited-wolf branch November 14, 2023 14:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
type/docs Documentation needs to be created/updated/clarified
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants