OSDOCS#11144:Secret Store TP->GA

[lpettyjo]

Version(s): 4.18+

Issue: https://issues.redhat.com/browse/OSDOCS-11144

Link to docs preview: https://84311--ocpdocs-pr.netlify.app/openshift-enterprise/latest/storage/container_storage_interface/persistent-storage-csi-secrets-store.html

QE review:

• QE has approved this change.

Additional information:

PTAL: @dobsonj @wsun1 @gcharot

[ocpdocs-previewbot]

🤖 Thu Nov 07 19:05:42 - Prow CI generated the docs preview:

https://84311--ocpdocs-pr.netlify.app/openshift-enterprise/latest/nodes/pods/nodes-pods-secrets-store.html
https://84311--ocpdocs-pr.netlify.app/openshift-enterprise/latest/storage/container_storage_interface/persistent-storage-csi-secrets-store.html

[mburke5678]

@lpettyjo LGTM. Don't forget to update the Table 18. Storage Technology Preview tracker in the release notes.

[openshift-ci]

@lpettyjo: all tests passed!

Full PR test history. Your PR dashboard.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

[bergerhoffer]

LGTM, ty!

[dobsonj]

/lgtm

[gcharot]

In "Secrets store providers" section, we mention "The following secrets store providers are available for use with the Secrets Store CSI Driver Operator:"
What do we mean by "are available"? Are those actually certified/supported?

[gcharot]

@nkpng2k is the PM responsible for provider's integration. He will provide the wording guidelines

[bergerhoffer]

In "Secrets store providers" section, we mention "The following secrets store providers are available for use with the Secrets Store CSI Driver Operator:" What do we mean by "are available"? Are those actually certified/supported?

@gcharot nothing is technically supported since it's only released as technology preview. We specifically don't say anything about "supported" for that reason. In our case it really just means that we've tested them that they work.

[bergerhoffer]

In "Secrets store providers" section, we mention "The following secrets store providers are available for use with the Secrets Store CSI Driver Operator:" What do we mean by "are available"? Are those actually certified/supported?

@gcharot nothing is technically supported since it's only released as technology preview. We specifically don't say anything about "supported" for that reason. In our case it really just means that we've tested them that they work.

Apologies ignore me - I'm still in last release's mode before we went GA 🤦‍♀️

[gcharot]

yes that was fine for TP but it goes GA in 4.18

[nkpng2k]

I proposed a similar change for cert-manager:

Supported issuer types:
The cert-manager operator for Red Hat OpenShift has been tested with the following issuer types:

• Automated Certificate Management Environment (ACME)
• Certificate authority (CA)
• Self-signed
• Vault
• Venafi
• Nokia NetGuard Certificate Manager (NCM)

The tests performed can be found here:

[From Polarion]

Due to provider limitations such as licensing or access to partner infrastructure, Red Hat cannot test all factors associated with proper functionality of the issuers.

Red Hat support for these 3rd party softwares can be found here <insert link to 3rd party software support statement from red hat>

[gcharot]

Looks good @nkpng2k
I don't think we should link to polarion though

by 3rd party support statement do you mean https://access.redhat.com/third-party-software-support ?

[nkpng2k]

agree with @gcharot wrt to polarion... was a suggestion that maybe we add an actual table. Dates versions etc. although, the likelihood that these tests were run on OCP 4.15/4.16 is very high.

by 3rd party support statement do you mean https://access.redhat.com/third-party-software-support ?

yes

[ropatil010]

LGTM

[lpettyjo]

I proposed a similar change for cert-manager:

Supported issuer types: The cert-manager operator for Red Hat OpenShift has been tested with the following issuer types:

• Automated Certificate Management Environment (ACME)
• Certificate authority (CA)
• Self-signed
• Vault
• Venafi
• Nokia NetGuard Certificate Manager (NCM)

The tests performed can be found here:

[From Polarion]

Due to provider limitations such as licensing or access to partner infrastructure, Red Hat cannot test all factors associated with proper functionality of the issuers.

Red Hat support for these 3rd party softwares can be found here <insert link to 3rd party software support statement from red hat>

@bergerhoffer Hey Andrea, are you going to make these changes are do you want me to make them in this PR?

[bergerhoffer]

@lpettyjo I can take care of that update. I've opened https://issues.redhat.com/browse/OSDOCS-12832 to track it.

[gcharot]

LGTM assuming we're covering the provider's wording in another PR

[lpettyjo]

/cherrypick enterprise-4.18

[openshift-cherrypick-robot]

@lpettyjo: new pull request created: #86782

In response to this:

/cherrypick enterprise-4.18

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.