[GitHub] [openwhisk-deploy-kube] dgrove-oss commented on issue #594: gen-certs unable to creates certificates due to insufficient permissions on OpenShift 4.3

[GitBox <gi...@apache.org>]

dgrove-oss commented on issue #594: gen-certs unable to creates certificates due to insufficient permissions on OpenShift 4.3
URL: https://github.com/apache/openwhisk-deploy-kube/issues/594#issuecomment-608680471
 
 
   Does it help if you change `openwhisk-deploy-kube/helm/openwhisk/configMapFiles/genCerts/gencerts.sh` to write the certificate to `/tmp` instead of `/cert-gen` ?   We just need a scratch directory to write files, doesn't need to be /cert-gen specifically.
   
   ```
   diff --git a/helm/openwhisk/configMapFiles/genCerts/gencerts.sh b/helm/openwhisk/configMapFiles/genCerts/gencerts.sh
   index b5dbb19..a0a4067 100755
   --- a/helm/openwhisk/configMapFiles/genCerts/gencerts.sh
   +++ b/helm/openwhisk/configMapFiles/genCerts/gencerts.sh
   @@ -19,7 +19,7 @@ if kubectl get secret $NGINX_CERT_SECRET; then
        echo "using existing $NGINX_CERT_SECRET secret"
    else
        echo "generating new $NGINX_CERT_SECRET secret"
   -    genssl.sh "*.$WHISK_API_HOST_NAME" server /cert-gen
   -    kubectl create secret tls $NGINX_CERT_SECRET --cert=/cert-gen/openwhisk-server-cert.pem --key=/cert-gen/openwhisk-server-key.pem
   +    genssl.sh "*.$WHISK_API_HOST_NAME" server /tmp
   +    kubectl create secret tls $NGINX_CERT_SECRET --cert=/tmp/openwhisk-server-cert.pem --key=/tmp/openwhisk-server-key.pem
    fi
   ```

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
users@infra.apache.org


With regards,
Apache Git Services