Alarm 500.200 is raised before the alarm-before window
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
StarlingX |
Fix Released
|
Medium
|
ayyappa |
Bug Description
Brief Description
-----------------
Alarm 500.200 is raised before the alarm-before window
Severity
--------
major
Steps to Reproduce
------------------
Consider the following values for certificate managed by cert-manager
alarm-before = 30days(default value set by system for all certs)
renew-before = 14days 2 hours
duration = 182days 12 hours
since the renew-before < alarm-before, the threshold to raise the alarm is set to 14days(audit only considers days), notice the timestamp of alarm in timestamp/logs section "2024-02-
And the certificate got renewed around Wed Feb 28 16:51:48 2024(UTC time is 21:51:48) by cert-manager, so when the next hourly audit ran the alarm got cleared.
so user will notice the alarm between Wed feb 28 6:48 to Web feb 28 16:51+next hourly audit scheduled = 12hours approximately on Wed feb 28th
Expected Behavior
------------------
alarm should not be raised before the renew-before time
Actual Behavior
----------------
alarm raised before the renew-before time
Reproducibility
---------------
100%
System Configuration
-------
all lab types
stx 8.0
Branch/Pull Time/Commit
-------
na
Last Pass
---------
na
Timestamp/Logs
--------------
~(keystone_admin)]$ fm alarm-list
+------
| Alarm ID | Reason Text | Entity ID | Severity | Time Stamp |
+------
| 500.200 | Certificate namespace=monitor, certificate=
| | 2024-03-13, 23:59:34 | mon-elastic-
| | | | | |
| 500.200 | Certificate namespace=monitor, certificate=
| | 2024-03-13, 23:59:34 | mon-elastic-
| | | | | |
+------
Test Activity
-------------
debugging request
Workaround
----------
not required
description: | updated |
description: | updated |
Changed in starlingx: | |
importance: | Undecided → Medium |
assignee: | nobody → ayyappa (mantri425) |
tags: | added: stx.9.0 stx.fault stx.security |
Fix proposed to branch: master /review. opendev. org/c/starlingx /config/ +/910994
Review: https:/