Container Storage Modules Authorization Does Not Validate the Certificate When "skipCertificateValidation" is False

Resumen: When "skipCertificateValidation" is false for Container Storage Modules Authorization in the driver custom resource, the Authorization sidecar proxy (karavi-authorization-proxy container) does not validate the certificate. ...

Este artículo se aplica a Este artículo no se aplica a Este artículo no está vinculado a ningún producto específico. No se identifican todas las versiones del producto en este artículo.
Consulte estos recursos

Síntomas

The user is unable to validate the Authorization proxy-server certificate even when "skipCertificateValidation" is false in the authorization section of the driver custom resource (CR) installed by the Container Storage Modules Operator.

There are no error logs.

With this set in the driver CR: 
- name: "SKIP_CERTIFICATE_VALIDATION"
  value: "false"
The resulting configuration in the Authorization sidecar proxy is: 
- name: INSECURE
  value: "true"
It should be false.

Causa

The Container Storage Modules Operator does not properly set the "skipCertificateValidation" environment variable in the karavi-authorization-proxy when Authorization is enabled in the driver custom resource.

Resolución

Workaround:

After the driver customer resource is deployed with Authorization enabled, edit the driver deployment and daemon set to update the INSECURE environment variable for the karavi-authorization-proxy container from true to false. 
Kubectl -n <driver-namespace> edit deploy/<driver>-controller
Kubectl –n <driver-namespace> edit ds/<driver>-node
Go to the karavi-authorization-proxy container and change the INSECURE environment variable from false to true.


Resolution

Engineering has provided a patch for Dell Container Storage Interface (CSI) Driver for Container Storage Modules Operator 2.9.1, where the skip certificate validation flow is addresses.
Propiedades del artículo
Número del artículo: 000221766
Tipo de artículo: Solution
Última modificación: 09 feb 2024
Versión:  3
Encuentre respuestas a sus preguntas de otros usuarios de Dell
Servicios de soporte
Compruebe si el dispositivo está cubierto por los servicios de soporte.