Certificate update scripts can misbehave on HA control plance
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
tripleo |
Fix Released
|
Medium
|
Damien Ciabrini |
Bug Description
When deploying a TLS-e environment, certmonger tracks the certificates for various services. On certificate update, certmonger calls post-save scripts provided by TripleO. Those script are in charge of notifying containers that they must reload their state to use the newly generated certificates.
HAProxy and RabbitMQ post-save scripts are meant to be used on the HA/non-HA overcloud as well as the undercloud/
In HA overcloud/
Fix proposed to branch: master /review. opendev. org/738215
Review: https:/