-
Notifications
You must be signed in to change notification settings - Fork 5
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Govcloud #230
base: main
Are you sure you want to change the base?
Conversation
…re,gcp,cp4ddbwarehouse
…re,gcp,cp4ddbwarehouse
…re,gcp,cp4ddbwarehouse
…re,gcp,cp4ddbwarehouse
atal: [localhost]: FAILED! => {"api_found": true, "attempts": 20, "changed": false, "resources": [{"apiVersion": "sls.ibm.com/v1", "kind": "LicenseService", "metadata": {"creationTimestamp": "2023-11-06T12:42:34Z", "generation": 1, "managedFields": [{"apiVersion": "sls.ibm.com/v1", "fieldsType": "FieldsV1", "fieldsV1": {"f:spec": {".": {}, "f:domain": {}, "f:license": {".": {}, "f:accept": {}}, "f:mongo": {".": {}, "f:certificates": {}, "f:configDb": {}, "f:nodes": {}, "f:retryWrites": {}, "f:secretName": {}}, "f:settings": {".": {}, "f:auth": {".": {}, "f:enforce": {}}, "f:compliance": {".": {}, "f:enforce": {}}, "f:registration": {".": {}, "f:open": {}}, "f:registry": {}}}}, "manager": "OpenAPI-Generator", "operation": "Update", "time": "2023-11-06T12:42:34Z"}, {"apiVersion": "sls.ibm.com/v1", "fieldsType": "FieldsV1", "fieldsV1": {"f:status": {"f:licenseId": {}, "f:registrationKey": {}, "f:versions": {".": {}, "f:reconciled": {}}}}, "manager": "OpenAPI-Generator", "operation": "Update", "subresource": "status", "time": "2023-11-06T12:42:55Z"}, {"apiVersion": "sls.ibm.com/v1", "fieldsType": "FieldsV1", "fieldsV1": {"f:status": {".": {}, "f:conditions": {}}}, "manager": "ansible-operator", "operation": "Update", "subresource": "status", "time": "2023-11-06T12:56:56Z"}], "name": "masocp-kyqowt", "namespace": "ibm-sls-kyqowt", "resourceVersion": "78519", "uid": "f808cb89-9410-46b0-9b3e-402c421bfbfb"}, "spec": {"domain": "ibm-sls-kyqowt.apps.masocp-kyqowt.buyermas4aws.com", "license": {"accept": true}, "mongo": {"certificates": [{"alias": "ca", "crt": "-----BEGIN CERTIFICATE-----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\nqpyrW1YX8mD0VlJ8fGKM3G+aCOsiiPKDV/Uafrm+\n-----END CERTIFICATE-----\n"}, {"alias": "root", "crt": "-----BEGIN CERTIFICATE-----\nMIIEBjCCAu6gAwIBAgIJAMc0ZzaSUK51MA0GCSqGSIb3DQEBCwUAMIGPMQswCQYD\nVQQGEwJVUzEQMA4GA1UEBwwHU2VhdHRsZTETMBEGA1UECAwKV2FzaGluZ3RvbjEi\nMCAGA1UECgwZQW1hem9uIFdlYiBTZXJ2aWNlcywgSW5jLjETMBEGA1UECwwKQW1h\nem9uIFJEUzEgMB4GA1UEAwwXQW1hem9uIFJEUyBSb290IDIwMTkgQ0EwHhcNMTkw\nODIyMTcwODUwWhcNMjQwODIyMTcwODUwWjCBjzELMAkGA1UEBhMCVVMxEDAOBgNV\nBAcMB1NlYXR0bGUxEzARBgNVBAgMCldhc2hpbmd0b24xIjAgBgNVBAoMGUFtYXpv\nbiBXZWIgU2VydmljZXMsIEluYy4xEzARBgNVBAsMCkFtYXpvbiBSRFMxIDAeBgNV\nBAMMF0FtYXpvbiBSRFMgUm9vdCAyMDE5IENBMIIBIjANBgkqhkiG9w0BAQEFAAOC\nAQ8AMIIBCgKCAQEArXnF/E6/Qh+ku3hQTSKPMhQQlCpoWvnIthzX6MK3p5a0eXKZ\noWIjYcNNG6UwJjp4fUXl6glp53Jobn+tWNX88dNH2n8DVbppSwScVE2LpuL+94vY\n0EYE/XxN7svKea8YvlrqkUBKyxLxTjh+U/KrGOaHxz9v0l6ZNlDbuaZw3qIWdD/I\n6aNbGeRUVtpM6P+bWIoxVl/caQylQS6CEYUk+CpVyJSkopwJlzXT07tMoDL5WgX9\nO08KVgDNz9qP/IGtAcRduRcNioH3E9v981QO1zt/Gpb2f8NqAjUUCUZzOnij6mx9\nMcZ+9cWX88CRzR0vQODWuZscgI08NvM69Fn2SQIDAQABo2MwYTAOBgNVHQ8BAf8E\nBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUc19g2LzLA5j0Kxc0LjZa\npmD/vB8wHwYDVR0jBBgwFoAUc19g2LzLA5j0Kxc0LjZapmD/vB8wDQYJKoZIhvcN\nAQELBQADggEBAHAG7WTmyjzPRIM85rVj+fWHsLIvqpw6DObIjMWokpliCeMINZFV\nynfgBKsf1ExwbvJNzYFXW6dihnguDG9VMPpi2up/ctQTN8tm9nDKOy08uNZoofMc\nNUZxKCEkVKZv+IL4oHoeayt8egtv3ujJM6V14AstMQ6SwvwvA93EP/Ug2e4WAXHu\ncbI1NAbUgVDqp+DRdfvZkgYKryjTWd/0+1fS8X1bBZVWzl7eirNVnHbSH2ZDpNuY\n0SBd8dj5F6ld3t58ydZbrTHze7JJOd8ijySAp4/kiu9UfZWuTPABzDa/DSdz9Dk/\nzPW4CXXvhLmE02TA9/HeCw3KEHIwicNuEfw=\n-----END CERTIFICATE-----\n"}], "configDb": "admin", "nodes": [{"host": "docdb-kyqowt-1.cm6h5xrs32mp.eu-central-1.docdb.amazonaws.com", "port": 27017}, {"host": "docdb-kyqowt-2.cm6h5xrs32mp.eu-central-1.docdb.amazonaws.com", "port": 27017}, {"host": "docdb-kyqowt-3.cm6h5xrs32mp.eu-central-1.docdb.amazonaws.com", "port": 27017}], "retryWrites": false, "secretName": "ibm-sls-mongo-credentials"}, "settings": {"auth": {"enforce": true}, "compliance": {"enforce": true}, "registration": {"open": true}, "registry": "icr.io/cpopen"}}, "status": {"conditions": [{"lastTransitionTime": "2023-11-06T12:42:56Z", "message": "MongoDB configuration (certificates or credentials) is not valid. Ensure that mongo configuration, including certificates and credentials is correct ", "reason": "NotReady", "status": "False", "type": "Ready"}, {"lastTransitionTime": "2023-11-06T12:42:56Z", "message": "MongoDB configuration (certificates or credentials) is not valid: [digital envelope routines: EVP_DigestInit_ex] disabled for FIPS ", "reason": "IncorrectMongoCredentialsOrCertificates", "status": "False", "type": "SystemDatabaseReady"}, {"lastTransitionTime": "2023-11-06T12:42:56Z", "message": "", "reason": "", "status": "False", "type": "Successful"}, {"lastTransitionTime": "2023-11-06T12:56:45Z", "message": "Running reconciliation", "reason": "Running", "status": "False", "type": "Running"}, {"ansibleResult": {"changed": 0, "completion": "2023-11-06T12:56:56.635761", "failures": 1, "ok": 34, "skipped": 16}, "lastTransitionTime": "2023-11-06T12:56:56Z", "message": "NotReady: MongoDB configuration (certificates or credentials) is not valid. Ensure that mongo configuration, including certificates and credentials is correct", "reason": "Failed", "status": "True", "type": "Failure"}], "licenseId": "10005a7cc277", "registrationKey": "cda6e22c-4707-5953-8937-1499859085d9", "versions": {"reconciled": "3.8.1"}}}]} |
changes applicable for GovCloud..
code changes to remove sensitive data from log & bootnode..
kubeadmin secret creation code, CFT & other code updates for GovCloud..
Gov cloud nov24
code changes for logging & removing leading spaces from kubeadmin secret
OCS change
Putting back DB VPC peering code which was removed earlier..
Adding new US GovCloud listing product Id to config file..
Note for Padman
@padmankosalaram - Can ypu please check the changes I have done for removal for 'creation of new mongo' and include only for DocumentDB
FYI - This will be base directory for Govcloud , from next changes lets create branch on top of Govcloud