Using following vSphere Config Secret having thumbprint specified in the VirtualCenter section is not working.
So thumbprint based authentication is not supported in the multi vCenter deployment.
What you expected to happen:
thumbprint, insecure-flag and ca-file etc. vCenter specific parameter should not get overridden when they are not specified in the Global section.
Is this a BUG REPORT or FEATURE REQUEST?:
What happened:
Using following vSphere Config Secret having thumbprint specified in the VirtualCenter section is not working. So thumbprint based authentication is not supported in the multi vCenter deployment.
For single vCenter deployment, thumbprint based authentication works only when thumbprint is specified in the
Global
section as belowWhat you expected to happen:
thumbprint
,insecure-flag
andca-file
etc. vCenter specific parameter should not get overridden when they are not specified in theGlobal
section.We have a bug in the code Refer to https://github.com/kubernetes-sigs/vsphere-csi-driver/blob/a305ea2788d9d4c1432b1d2ab2df4dcf3d9750d6/pkg/common/cns-lib/vsphere/utils.go#L208-L224
Ever since we added support for thumbprint we have this bug - https://github.com/kubernetes-sigs/vsphere-csi-driver/commit/1aad2254fd39a9fb19dd05f44f26ae50d9209aba