Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Override AS3 ConfigMap is ignored if loaded according to the official documentation #3703

Open
gkor75 opened this issue Jan 2, 2025 · 2 comments
Labels
bug untriaged no JIRA created

Comments

@gkor75
Copy link
Contributor

gkor75 commented Jan 2, 2025

Setup Details

CIS Version : 2.18.1
Build: f5networks/k8s-bigip-ctlr:latest
BIGIP Version: Big IP 17.1.2
AS3 Version: 3.x
Agent Mode: AS3
Orchestration: K8
Pool Mode: Cluster
Additional Setup details: tested with Ingress example

Description

The Override AS3 ConfigMap is ignored if loaded according to the official documentation: https://clouddocs.f5.com/containers/latest/userguide/config-map.html#override-as3-configmap
The documentation instructs running the following command:

 kubectl create configmap my-config --from-file=./my/file_name.json

As a result, the "data" section of the generated ConfigMap starts with the key file_name: | instead of template: |.

In previous versions of CIS, the key string value in the "data" section was ignored. However, starting with version 2.x, CIS does not load the Override AS3 ConfigMap unless the key string is template.

Steps To Reproduce

  1. Create a test Ingress configuration
  2. Read the resulting AS3 configuration e.g. from the target BigIP
  3. Craft the Override AS3 ConfigMap to override selected Virtual Server attribute, e.g.
{
  "declaration": {
    "k8s": {
      "Shared": {
        "ingress_10_51_10_111_443": {
          "profileTCP": {
            "egress": "lan",
            "ingress": "mobile"
          }
        }
      }
    }
  }
  1. follow the instructions:
 kubectl create configmap my-config --from-file=./my/file_name.json
# label the configmap (not mentioned in the instruction)
kubectl label configmap my-config f5type=virtual-server overrideAS3="true"
  1. use --override-as3-declaration CIS attribute to point to your configmap
  2. observe that the the Override AS3 ConfigMap changes are not applied

Expected Result

The key string value in the "data" section of Override AS3 ConfigMap should be ignored. The Override AS3 ConfigMap should be loaded regardless of the key string value.

The official documentation should mention the configmap labeling command kubectl label configmap my-config f5type=virtual-server overrideAS3="true"

Actual Result

The Override AS3 ConfigMap is not loaded.

Diagnostic Information

N/A - there are no logs generated that would inform about the problem.

Observations (if any)

@gkor75 gkor75 added bug untriaged no JIRA created labels Jan 2, 2025
@vklohiya
Copy link
Contributor

vklohiya commented Jan 3, 2025

@gkor75 , please share the CIS deployment file and AS3 configMap to reproduce the issue.

@trinaths
Copy link
Contributor

trinaths commented Jan 3, 2025

@gkor75 Please the info to [email protected]

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug untriaged no JIRA created
Projects
None yet
Development

No branches or pull requests

3 participants