Skip to content

Commit 30c7e26

Browse files
committed
DOCPLAN-31: Remove unnecessary module, move to admonition
1 parent c277b6b commit 30c7e26

File tree

3 files changed

+41
-47
lines changed

3 files changed

+41
-47
lines changed

modules/virt-configuring-certificate-rotation.adoc

Lines changed: 41 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -58,3 +58,44 @@ For example:
5858
----
5959
$ oc apply -f kubevirt-hyperconverged.yaml
6060
----
61+
62+
[WARNING]
63+
====
64+
Deleting one or more `certConfig` values in the `HyperConverged` CR causes the `certConfig` values to revert to the default values.
65+
66+
If the default values conflict with one of the following conditions, you receive an error message instead:
67+
68+
* The value of `ca.renewBefore` must be less than or equal to the value of `ca.duration`.
69+
* The value of `server.duration` must be less than or equal to the value of `ca.duration`.
70+
* The value of `server.renewBefore` must be less than or equal to the value of `server.duration`.
71+
72+
For example, if you remove the `server.duration` value, the default value of `24h0m0s` is greater than the value of `ca.duration`, which conflicts with the specified conditions:
73+
74+
[source,yaml,subs="attributes+"]
75+
----
76+
apiVersion: hco.kubevirt.io/v1beta1
77+
kind: HyperConverged
78+
metadata:
79+
name: kubevirt-hyperconverged
80+
namespace: {CNVNamespace}
81+
spec:
82+
# ...
83+
certConfig:
84+
ca:
85+
duration: 4h0m0s
86+
renewBefore: 1h0m0s
87+
server:
88+
duration: 4h0m0s
89+
renewBefore: 4h0m0s
90+
# ...
91+
----
92+
93+
This results in the following error message:
94+
95+
[source,terminal]
96+
----
97+
error: hyperconvergeds.hco.kubevirt.io "kubevirt-hyperconverged" could not be patched: admission webhook "validate-hco.kubevirt.io" denied the request: spec.certConfig: ca.duration is smaller than server.duration
98+
----
99+
100+
The error message only mentions the first conflict. Review all `certConfig` values before you proceed.
101+
====

modules/virt-troubleshooting-cert-rotation-parameters.adoc

Lines changed: 0 additions & 46 deletions
This file was deleted.

virt/post_installation_configuration/virt-configuring-certificate-rotation.adoc

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -10,4 +10,3 @@ Configure certificate rotation parameters to replace existing certificates.
1010
toc::[]
1111

1212
include::modules/virt-configuring-certificate-rotation.adoc[leveloffset=+1]
13-
include::modules/virt-troubleshooting-cert-rotation-parameters.adoc[leveloffset=+1]

0 commit comments

Comments
 (0)