netscaler / netscaler-k8s-ingress-controller

NetScaler Ingress Controller for Kubernetes:
https://developer-docs.citrix.com/projects/citrix-k8s-ingress-controller/en/latest/
311 stars 91 forks source link

CIC cannot use preconfigured certkey which name contains dots #37

Closed alloran closed 5 years ago

alloran commented 5 years ago

Hi!

CIC cannot use preconfigured certkey which name contains dots.

ingress annotation: ingress.citrix.com/preconfigured-certkey : '{"certs": [ {"name": "STAR.example.com"} ] }'

netscaler cli:

show ssl certkey STAR.example.com
    Name: STAR.example.com      Status: Valid,   Days to expiration:574
        ...

cic pod logs:

2019-05-17 08:33:31,153  - DEBUG - [nitrointerface.py:_create_nsapp_certkey:1737] (MainThread) SSL Certkey not found with error Certificate does not exist
2019-05-17 08:33:31,153  - DEBUG - [nitrointerface.py:_create_nsapp_certkey:1742] (MainThread) skip _create_nsapp_certkey for preconfigured-certkey STAR
2019-05-17 08:33:31,205  - ERROR - [nitrointerface.py:_bind_ssl_vserver:1679] (MainThread) Nitro Exception::bind_ssl_vserver::errorcode=1540,message=Certificate does not exist

cic version 1.1.1

agrbhuvnesh commented 5 years ago

@alloran, Thanks for reporting this issue. We are able to reproduce this in our environment and are in process to provide the fix. We will update fix along with next release by 6th June, 2019.

alloran commented 5 years ago

Any progress on this issue?

krdpk17 commented 5 years ago

@alloran Thanks for the query. We have fixed this issue and it will will be resolved in upcoming version.

krdpk17 commented 5 years ago

@alloran Kindly use the current release(1.2.0) and let us know. This code has the fix. Wished to share this with you.

alloran commented 5 years ago

Now it works, thanks!