show-certs.sh incorrectly shows some of the etcd certs as AutoRenewal=Manual

Bug #1982109 reported by Greg Waines
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
StarlingX
Fix Released
Low
Karla Felix

Bug Description

Brief Description
-----------------
The output of 'sudo show-certs.sh' should show
the ETCD client cert, ETCD server cert and ETCD apiserevert client cert as 'Renewal: Automatic' in StarlingX R7.
( ... it shows it incorrectly as 'Renewal: Manual' )

( NOTE that etcd CA certificate is correctly shown as 'Renewal: Manual' )

Severity
--------
<Minor: System/Feature is usable with minor issue>

Steps to Reproduce
------------------
% sudo show-certs.sh

Expected Behavior
------------------
ETCD client cert, ETCD server cert and ETCD apiserevert client cert should be shown as 'Renewal: Automatic' in StarlingX R7

Actual Behavior
----------------
They are shown as 'Renewal: Manual'

Reproducibility
---------------
100%

System Configuration
--------------------
All configs.

Branch/Pull Time/Commit
-----------------------
StarlingX R7

Last Pass
---------
No

Timestamp/Logs
--------------
NA

Test Activity
-------------
Other

Workaround
----------
None.

Ghada Khalil (gkhalil)
tags: added: stx.security
Ghada Khalil (gkhalil)
Changed in starlingx:
importance: Undecided → Low
status: New → Triaged
assignee: nobody → Karla Felix (kkarolin)
Changed in starlingx:
status: Triaged → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to utilities (master)

Reviewed: https://review.opendev.org/c/starlingx/utilities/+/851554
Committed: https://opendev.org/starlingx/utilities/commit/ef498b54b6f154d4084bc13eb2df3361f1aa14b5
Submitter: "Zuul (22348)"
Branch: master

commit ef498b54b6f154d4084bc13eb2df3361f1aa14b5
Author: Karla Felix <email address hidden>
Date: Fri Jul 29 11:57:09 2022 -0300

    shows some of the etcd certs AutoRenewal=Automatic

    The output of 'sudo show-certs.sh' should show
    the ETCD client cert, ETCD server cert and ETCD apiserevert
    client cert as 'Renewal: Automatic' in starlingx 22.06
    ( ... it shows it incorrectly as 'Renewal: Manual' )

    Test Plan:

    PASS: Run "sudo show-certs.sh" and check if etcd certs were
          shown as 'AutoRenewal=Automatic'

    Closes-bug: 1982109
    Change-Id: Ie1ec4770362b550456703d5f25b1cbe67c4511c7

Changed in starlingx:
status: In Progress → Fix Released
Ghada Khalil (gkhalil)
tags: added: stx.8.0
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.