Skip to content

Commit 9b0db69

Browse files
ankediarjeberhard
authored andcommitted
Addressed Rosemary's review comments.
1 parent 4cf2db1 commit 9b0db69

File tree

3 files changed

+9
-9
lines changed

3 files changed

+9
-9
lines changed

documentation/site/content/managing-operators/conversion-webhook.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -47,7 +47,7 @@ The `helm install` step requires cluster-level permissions for listing and readi
4747
{{% /notice %}}
4848

4949
{{% notice note %}}
50-
The Operator version 4.x requires a conversion webhook installation. The `operatorOnly` Helm configuration value is an advanced setting and should be used only when a conversion webhook is already installed.
50+
Operator version 4.x requires a conversion webhook. The `operatorOnly` Helm configuration value is an advanced setting and should be used only when a conversion webhook is already installed.
5151
{{% /notice %}}
5252

5353

documentation/site/content/managing-operators/installation.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -24,9 +24,9 @@ See [Prepare for installation]({{<relref "/managing-operators/preparation.md">}}
2424
{{% notice note %}}
2525
By default, installing the operator also configures a deployment and supporting resources for the
2626
[conversion webhook]({{<relref "/managing-operators/conversion-webhook">}})
27-
and deploys the conversion webhook. The conversion webhook deployment is required for Operator version 4.x.
28-
To skip the conversion webhook installation when a conversion webhook is already installed, set the helm configuration value `operatorOnly` to `true`
29-
in the `helm install` command.
27+
and deploys the conversion webhook. The conversion webhook deployment is required for operator version 4.x.
28+
When a conversion webhook is already installed, skip the conversion webhook installation by setting
29+
the Helm configuration value `operatorOnly` to `true` in the `helm install` command.
3030
For more details, see [install the conversion webhook]({{<relref "/managing-operators/conversion-webhook#install-the-conversion-webhook">}}).
3131
{{% /notice %}}
3232

documentation/site/content/managing-operators/troubleshooting.md

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -325,27 +325,27 @@ weblogic-operator-webhook-svc ClusterIP 10.106.89.198 <none> 8084/T
325325
If the conversion webhook Deployment status is not ready, then [check the conversion webhook log]({{<relref "/managing-operators/troubleshooting#check-the-conversion-webhook-log">}}) and the [conversion webhook events]({{<relref "/managing-operators/troubleshooting#check-for-conversion-webhook-events">}}) in the conversion webhook namespace. If the conversion webhook service doesn't exist, make sure that the conversion webhook was installed correctly and reinstall the conversion webhook to see if it resolves the issue.
326326
327327
#### X509: Certificate signed by unknown authority error from the webhook
328-
The following `x509: certificate signed by unknown authority` error from the conversion webhook can be due to the incorrect proxy configuration of the Kubernetes API server in your environment or incorrect self-signed certificate in the conversion webhook configuration in the Domain CustomResourceDefinition (CRD).
328+
The following `x509: certificate signed by unknown authority` error from the conversion webhook can be due to the incorrect proxy configuration of the Kubernetes API server in your environment or incorrect self-signed certificate in the conversion webhook configuration in the Domain CRD.
329329
330330
```
331331
Error from server (InternalError): error when creating "./weblogic-domains/sample-domain1/domain.yaml": Internal error occurred: conversion webhook for weblogic.oracle/v8, Kind=Domain failed: Post "https://weblogic-operator-webhook-svc.sample-weblogic-operator-ns.svc:8084/webhook?timeout=30s": x509: certificate signed by unknown authority
332332
```
333-
- If your environment uses a PROXY server, then ensure that the NO_PROXY settings of the Kubernetes API server include `.svc` value. The Kubernetes API server makes a REST request to the conversion webhook REST end-point using the hostname `weblogic-operator-webhook-svc.${NAMESPACE}.svc` in the POST URL. If the REST request is routed through a PROXY server, then you will see an "x509: certificate signed by unknown authority" error. As this REST request is internal to your Kubernetes cluster, ensure that it doesn't get routed through a PROXY server by adding `.svc` to the `NO_PROXY` settings.
334-
- If your Domain CRD conversion webhook configuration has an incorrect self-signed certificate for some reason, then you can patch the Domain CRD to remove the existing conversion webhook configuration. The operator will re-create the conversion webhook configuration with the correct self-signed certificaten in Domain CRD. Use the below patch command to remove the conversion webhook configuration in the Domain CRD to see if it resolves the error.
333+
- If your environment uses a PROXY server, then ensure that the NO_PROXY settings of the Kubernetes API server include the `.svc` value. The Kubernetes API server makes a REST request to the conversion webhook REST endpoint using the host name `weblogic-operator-webhook-svc.${NAMESPACE}.svc` in the POST URL. If the REST request is routed through a PROXY server, then you will see an "x509: certificate signed by unknown authority" error. Because this REST request is internal to your Kubernetes cluster, ensure that it doesn't get routed through a PROXY server by adding `.svc` to the `NO_PROXY` settings.
334+
- If, for some reason your Domain CRD conversion webhook configuration has an incorrect self-signed certificate, then you can patch the Domain CRD to remove the existing conversion webhook configuration. The operator will re-create the conversion webhook configuration with the correct self-signed certificate in the Domain CRD. Use the following `patch` command to remove the conversion webhook configuration in the Domain CRD to see if it resolves the error.
335335
336336
```
337337
kubectl patch crd domains.weblogic.oracle --type=merge --patch '{"spec": {"conversion": {"strategy": "None", "webhook": null}}}'
338338
```
339339
340340
#### Webhook errors in older operator versions
341-
When you install Operator version 4.x or upgrade to Operator 4.x, a conversion webhook configuration is added to your Domain CRD. If you downgrade or switch back to the operator version 3.x, the conversion webhook configuration is not removed from the CRD. This is to support the environments with multiple Operator installations potentially with different versions. For environments having a single Operator installation, use the below patch command to manually remove the conversion webhook configuration from Domain CRD.
341+
When you install operator version 4.x or upgrade to operator 4.x, a conversion webhook configuration is added to your Domain CRD. If you downgrade or switch back to the operator version 3.x, the conversion webhook configuration is not removed from the CRD. This is to support environments with multiple operator installations potentially with different versions. For environments having a single operator installation, use the following `patch` command to manually remove the conversion webhook configuration from Domain CRD.
342342
343343
```
344344
kubectl patch crd domains.weblogic.oracle --type=merge --patch '{"spec": {"conversion": {"strategy": "None", "webhook": null}}}'
345345
```
346346
347347
#### Webhook errors in operator dedicated Mode
348-
If the Operator is running in the `Dedicated` mode, the operator's service account will not have the permission to read or update the CRD. If you need to convert the domain resources with `weblogic.oracle/v8` schema to `weblogic.oracle/v9` schema using conversion webhook in `Dedicated` mode, then you can manually add the conversion webhook configuration to the Domain CRD. Use the below patch command to add the conversion webhook configuration to the Domain CRD.
348+
If the operator is running in the `Dedicated` mode, the operator's service account will not have the permission to read or update the CRD. If you need to convert the domain resources with `weblogic.oracle/v8` schema to `weblogic.oracle/v9` schema using the conversion webhook in `Dedicated` mode, then you can manually add the conversion webhook configuration to the Domain CRD. Use the following `patch` command to add the conversion webhook configuration to the Domain CRD.
349349
350350
**Note**: Substitute `YOUR_OPERATOR_NS` in the below command with the namespace where the operator is installed.
351351

0 commit comments

Comments
 (0)