Currently we are not clearing the ssl_ca certificate
expiring/expired alarm on active alarm audit when the
certificate is already uninstalled, this change clears
the alarm if the expiring/expired certificate is deleted
on active alarm audit.
Test Plan:
PASS: Install a ssl_ca certificate expires in 30days,
run the full audit to raise the alarm, now
uninstall the certificate and notice the alarm is
cleared on active alarm audit.
PASS: Install multiple expiring ssl_ca certificates,
run full audit to raise the alarms, now uninstall
one ssl_ca certificate, when the active alarm
audit is run verify only uninstalled certificate
alarm is cleared.
Reviewed: https:/ /review. opendev. org/c/starlingx /config/ +/904235 /opendev. org/starlingx/ config/ commit/ 4134359426d0f53 d40b5913d4a084f 0a895daa78
Committed: https:/
Submitter: "Zuul (22348)"
Branch: master
commit 4134359426d0f53 d40b5913d4a084f 0a895daa78
Author: amantri <email address hidden>
Date: Thu Dec 21 13:40:19 2023 -0500
Clear ssl_ca certificate alarm
Currently we are not clearing the ssl_ca certificate expired alarm on active alarm audit when the
expiring/
certificate is already uninstalled, this change clears
the alarm if the expiring/expired certificate is deleted
on active alarm audit.
Test Plan:
PASS: Install a ssl_ca certificate expires in 30days,
run the full audit to raise the alarm, now
uninstall the certificate and notice the alarm is
cleared on active alarm audit.
PASS: Install multiple expiring ssl_ca certificates,
run full audit to raise the alarms, now uninstall
one ssl_ca certificate, when the active alarm
audit is run verify only uninstalled certificate
alarm is cleared.
Closes-bug: 2047165
Change-Id: Icb7d4814eedba3 202b92eda37fb17 e46f93d68b7
Signed-off-by: amantri <email address hidden>