Api portal install on Azure aks cluster fails to create tls secrets

Products

• CA API Developer Portal

Issue/Introduction

While installing the Portal 5.3.1 with Helm charts on Azure AKS we encounter issues. We pinpointed these issues to the creation of the secrets for portal-external-secret and portal-internal-secret.

It seems the tls-manager job creates empty secrets, there are no key/value pairs added.

Resolution

The apiportal-tls-manager job that spins up a pod and runs a script in it to create the secrets portal-internal-secret and portal-external-secret,this scripts has a problem with  missing podAnnotation:   kubernetes.azure.com/set-kube-service-host-fqdn: "" which prevent it to communicate with the Kubernetes cluster to create the secrets 

We will add the podAnnotation option in the  apiportal-tls-manager job in a updated helm deployment .