Details
-
Bug
-
Resolution: Done
-
Normal
-
4.13.z, 4.12.z, 4.11.z
-
Moderate
-
No
-
1
-
OSDOCS Sprint 244, OSDOCS Sprint 245
-
2
-
Rejected
-
False
-
-
N/A
-
Release Note Not Required
Description
Description of problem:
It is currently not described that you need to have the User PKI set up if you have an internal PKI in your company.
Version-Release number of selected component (if applicable):
All
How reproducible:
All the time
Steps to Reproduce:
1. Have nutanix set up with a Private PKI 2. Install OpenShift 3. Will fail with errors in the cloud-operator that you can dig into.
Actual results:
Installation Failed with limited erros
Expected results:
Installation Completed
Additional info:
The text that has to go in the warning label are in addition to: If your Nutanix environment is using the default self-signed SSL certificate, replace it with a certificate that is signed by a CA. The installation program requires a valid CA-signed certificate to access to the Prism Central API. For more information about replacing the self-signed certificate, see the Nutanix AOS Security Guide. If this certificate are from a private PKI then additional steps for a User PKI has to be setup prior to installation, please follow the Configuring a custom PKI for further information: https://docs.openshift.com/container-platform/4.13/networking/configuring-a-custom-pki.html