remove the check to derive renewal value of elastic certs in show-certs.sh scirpt

Bug #2061014 reported by ayyappa
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
StarlingX
Fix Released
Low
ayyappa

Bug Description

Brief Description
-----------------
remove the check to derive the renewal value of elastic certs in show-certs.sh scirpt

Severity
------
Minor - this is a minor inconsistency, but is causing user confusion

Steps to Reproduce
-------------------
Elastic certs are managed by cert-manager by default, so we can remove the condition in the show-certs script where it compares the values of mon-elastic-services-extca-crt and mon-elastic-services-ca-crt secret to derive the values of renewal

Expected Behavior
----------------
na

Actual Behavior
--------------
na

Reproducibility
-------------------
100% Reproducible

System Configuration
------------------

all lab types

Load info (eg: 2022-03-10_20-00-07)

stx.8.0

Branch/Pull Time/Commit
-----------------------
NA.

Last Pass
--------
N/A Day one config

Timestamp/Logs
------------
NA.

Alarms
------
N/A

Test Activity
--------------
Debugging Request

Workaround
-----------
Not required.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to utilities (master)

Fix proposed to branch: master
Review: https://review.opendev.org/c/starlingx/utilities/+/915504

Changed in starlingx:
status: New → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to utilities (master)

Reviewed: https://review.opendev.org/c/starlingx/utilities/+/915504
Committed: https://opendev.org/starlingx/utilities/commit/a79f2d06c83d55743e37c753a8c2fac9a39416a4
Submitter: "Zuul (22348)"
Branch: master

commit a79f2d06c83d55743e37c753a8c2fac9a39416a4
Author: amantri <email address hidden>
Date: Thu Apr 11 15:09:44 2024 -0400

    Remove renewal check for WRA certificates

    In show-certs script to derive the renewal field for WRA certs
    mon-elastic-services-secrets/ca.crt and
    mon-elastic-services-secrets/ext-ca.crt, the contents are
    compared with mon-elastic-services-ca-crt and
    mon-elastic-services-extca-crt secrets respectively, this is
    creating a confusion to the user from the show-certs script
    output when WRA fails to update the certificates as per its
    certificate management and also WRA certificates are managed by
    cert-manager by default, so removing this condition and keeping
    only secret exist check makes it clear for the user what is
    expected from the script output.

    TestCases:
    PASS: Have different contents in mon-elastic-services-secrets/
          ca.crt and mon-elastic-services-ca-crt and notice the
          renewal field for mon-elastic-services-secrets/ca.crt
          shows as "Automatic"
    PASS: Have different contents in mon-elastic-services-secrets/
          ext-ca.crt and mon-elastic-services-ext-ca-crt and notice the
          renewal field for mon-elastic-services-secrets/ext-ca.crt
          shows as "Automatic"

    Closes-Bug: 2061014

    Change-Id: Ib6e0627eda9b401210f2eda5c0fa8e613738a11e
    Signed-off-by: amantri <email address hidden>

Changed in starlingx:
status: In Progress → Fix Released
Ghada Khalil (gkhalil)
summary: - remove the check to derive renewal value of WRA certs in show-certs.sh
- scirpt
+ remove the check to derive renewal value of elastic certs in show-
+ certs.sh scirpt
description: updated
Changed in starlingx:
importance: Undecided → Low
tags: added: stx.10.0 stx.security
Changed in starlingx:
assignee: nobody → ayyappa (mantri425)
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.