When adding the "ceph-iscsi:certificates vault:certificates" relation, the unit status of ceph-iscsi turns into error although it's eventually recovered by retries of the failed hook.
25 Oct 2023 02:37:23Z juju-unit executing running certificates-relation-created hook
25 Oct 2023 02:37:23Z juju-unit executing running certificates-relation-joined hook for vault/0
25 Oct 2023 02:37:24Z juju-unit executing running certificates-relation-changed hook for vault/0
25 Oct 2023 02:37:25Z juju-unit idle
25 Oct 2023 02:37:25Z juju-unit executing running certificates-relation-changed hook for vault/0
25 Oct 2023 02:37:25Z juju-unit error hook failed: "certificates-relation-changed"
25 Oct 2023 02:37:30Z juju-unit executing running certificates-relation-changed hook for vault/0
25 Oct 2023 02:37:35Z workload active Unit is ready
25 Oct 2023 02:37:35Z juju-unit idle
unit-ceph-iscsi-0: 02:37:25 DEBUG unit.ceph-iscsi/0.juju-log certificates:17: Emitting Juju event certificates_relation_changed.
unit-ceph-iscsi-0: 02:37:25 INFO unit.ceph-iscsi/0.juju-log certificates:17: A CA has not yet processed requests: app_data
unit-ceph-iscsi-0: 02:37:25 ERROR unit.ceph-iscsi/0.juju-log certificates:17: Uncaught exception while in charm code:
Traceback (most recent call last):
File "/var/lib/juju/agents/unit-ceph-iscsi-0/charm/./src/charm.py", line 589, in <module>
main(ops_openstack.core.get_charm_class_for_release())
File "/var/lib/juju/agents/unit-ceph-iscsi-0/charm/venv/ops/main.py", line 438, in main
_emit_charm_event(charm, dispatcher.event_name)
File "/var/lib/juju/agents/unit-ceph-iscsi-0/charm/venv/ops/main.py", line 150, in _emit_charm_event
event_to_emit.emit(*args, **kwargs)
File "/var/lib/juju/agents/unit-ceph-iscsi-0/charm/venv/ops/framework.py", line 355, in emit
framework._emit(event) # noqa
File "/var/lib/juju/agents/unit-ceph-iscsi-0/charm/venv/ops/framework.py", line 856, in _emit
self._reemit(event_path)
File "/var/lib/juju/agents/unit-ceph-iscsi-0/charm/venv/ops/framework.py", line 931, in _reemit
custom_handler(event)
File "/var/lib/juju/agents/unit-ceph-iscsi-0/charm/venv/interface_tls_certificates/ca_client.py", line 687, in _on_relation_changed
self.ready_events[request_type].emit()
File "/var/lib/juju/agents/unit-ceph-iscsi-0/charm/venv/ops/framework.py", line 355, in emit
framework._emit(event) # noqa
File "/var/lib/juju/agents/unit-ceph-iscsi-0/charm/venv/ops/framework.py", line 856, in _emit
self._reemit(event_path)
File "/var/lib/juju/agents/unit-ceph-iscsi-0/charm/venv/ops/framework.py", line 931, in _reemit
custom_handler(event)
File "/var/lib/juju/agents/unit-ceph-iscsi-0/charm/./src/charm.py", line 440, in on_tls_app_config_ready
self.ca_client.application_key.private_bytes(
File "/var/lib/juju/agents/unit-ceph-iscsi-0/charm/venv/interface_tls_certificates/ca_client.py", line 440, in application_key
return self._get_certs_and_keys('application')['default']['key']
File "/var/lib/juju/agents/unit-ceph-iscsi-0/charm/venv/interface_tls_certificates/ca_client.py", line 282, in _get_certs_and_keys
raise CAClientError(
interface_tls_certificates.ca_client.CAClientError
unit-ceph-iscsi-0: 02:37:25 ERROR juju.worker.uniter.operation hook "certificates-relation-changed" (via hook dispatching script: dispatch) failed: exit status 1
unit-ceph-iscsi-0: 02:37:25 INFO juju.worker.uniter awaiting error resolution for "relation-changed" hook
Sounds similar to https:/ /bugs.launchpad .net/charm- octavia/ +bug/2028683, but I didn't look into the code.