Status stays at "missing relation to cert authority" while waiting on cert response or leader

[Cory Johns]

The status is set to blocked with the message "Missing relation to certificate authority." at the start of the charm, before it sees the certificate relation, but it is not updated again until it is up and running. This makes the actual reason for it not being up hard to determine and can confuse debugging.

[Bas de Bruijne (basdbruijne)]

We are seeing something similar in this Victoria test run:

https://solutions.qa.canonical.com/testruns/testRun/ae9c9800-4e9c-4506-b84d-c0a903033ecb

It seems like the etcd leader isn't getting certs, in the syslog we see:

etcd[157962]: open /var/snap/etcd/common/server.crt: no such file or directory

Crashdumps and other artifacts can be found here:
https://oil-jenkins.canonical.com/artifacts/ae9c9800-4e9c-4506-b84d-c0a903033ecb/index.html

[Marian Gasparovic (marosg)]

We hit it also on yoga-focal

https://oil-jenkins.canonical.com/artifacts/47a4ecfa-7dc7-4498-a30d-eda3c851f38b/index.html