Just seen that behavior deploying ussuri/edge bundle with 1-unit vault charm from 1.7/stable with auto-generate-root-ca-cert: true.
After unsealing vault the charm shows "Missing root CA":
``` vault/0* blocked idle 2/lxd/4 172.27.105.143 8200/tcp Missing CA cert vault-mysql-router/0* active idle 172.27.105.143 Unit is ready ```
Then few moments after it goes back to normal "Unit is ready (active: true, mlock: disabled)".
Just seen that behavior deploying ussuri/edge bundle with 1-unit vault charm from 1.7/stable with auto-generate- root-ca- cert: true.
After unsealing vault the charm shows "Missing root CA":
``` mysql-router/ 0* active idle 172.27.105.143 Unit is ready
vault/0* blocked idle 2/lxd/4 172.27.105.143 8200/tcp Missing CA cert
vault-
```
Then few moments after it goes back to normal "Unit is ready (active: true, mlock: disabled)".