-
Notifications
You must be signed in to change notification settings - Fork 56
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
drenv: Fix submariner for MacOS #1497
Conversation
On Mac, the check for certs is more strict and it fails for submariner service. Turning off the check for certs. More info: golang/go#51991 Signed-off-by: Raghavendra Talur <raghavendra.talur@gmail.com>
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
lgtm
""" | ||
Run subctl join ... logging progress messages. | ||
""" | ||
args = ["join", broker_info, "--context", context, "--clusterid", clusterid] | ||
args.append(f"--check-broker-certificate={check_broker_certificate}") |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This will add:
--check-broker-certificate=True
Which may not work since it should use "true|false".
Since by default subctl checks certs, we can do this:
if not check_broker_certificates:
args.append("--check-broker-certificate=false")
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@@ -60,6 +60,7 @@ def join_cluster(cluster, broker_info): | |||
clusterid=cluster, | |||
cable_driver="vxlan", | |||
version=VERSION, | |||
check_broker_certificate=False, |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Do we want to do this only on macOS? It would be nice to detect real issues with certificates when we can.
Closing as it was fixed in #1536 |
On Mac, the check for certs is more strict and it fails for submariner
service. Turning off the check for certs.
More info: golang/go#51991
Signed-off-by: Raghavendra Talur raghavendra.talur@gmail.com