No monitoring for expiry of lb-mgmt-issuing-cacert etc

Bug #1885815 reported by Xav Paice
16
This bug affects 2 people
Affects Status Importance Assigned to Milestone
OpenStack Octavia Charm
Fix Released
Undecided
Adam Dyess

Bug Description

There is currently no monitoring for the expiry of certificates used by Octavia, settings lb-mgmt-issuing-cacert=, lb-mgmt-controller-cacert, lb-mgmt-controller-cert. If these certificates are left to expire, LBs fail to create/failover etc. The NRPE relation could be extended to issue a warning for certificates due to expire soon, and critical for expired certificates.

Adam Dyess (addyess)
Changed in charm-octavia:
status: New → Confirmed
assignee: nobody → Adam Dyess (addyess)
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to charm-octavia (master)

Fix proposed to branch: master
Review: https://review.opendev.org/740991

Changed in charm-octavia:
status: Confirmed → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to charm-octavia (master)

Reviewed: https://review.opendev.org/c/openstack/charm-octavia/+/740991
Committed: https://opendev.org/openstack/charm-octavia/commit/dbee693a16825a932567edbd375486c2511f4adb
Submitter: "Zuul (22348)"
Branch: master

commit dbee693a16825a932567edbd375486c2511f4adb
Author: David Ames <email address hidden>
Date: Tue Jun 23 22:13:52 2020 +0000

    Add NRPE Check for Octavia Certificates

    Change-Id: Ie4718b2c145e977fd11fff06ed3e854d41715eb8
    Closes-Bug: 1885815

Changed in charm-octavia:
status: In Progress → Fix Committed
Changed in charm-octavia:
milestone: none → 22.04
Changed in charm-octavia:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.