search

EngineerBetter / control-tower

Deploy and operate Concourse CI in a single command
https://www.engineerbetter.com
Apache License 2.0
121 stars 38 forks source link

Add "rotate NATS Certificate" job to self update jobs #339

Open RichardBradley opened 3 months ago

RichardBradley commented 3 months ago

The "rotate NATS Certificate" job needs to be run at least once a year on control-tower, otherwise the system breaks and is very difficult to recover.

See https://github.com/EngineerBetter/control-tower/blob/master/docs/troubleshooting.md#nats-certificate-is-expired and https://github.com/EngineerBetter/control-tower/issues/334

A job to do this automatically on a set schedule ought to be included out of the box in the "self update" section.

If there is some reason this can't be done automatically, the documentation ought to explain how to set this up manually, so the install doesn't fail yearly.

BinaryTweedDeej commented 2 months ago

Hey @RichardBradley, thanks for your continued engagement. Just checking that you saw on the README that EngineerBetter is no more, and the team that used to work on this has dispersed.

I don't know if @crsimmons, one of the originators, might still be looking at it?

RichardBradley commented 2 days ago

Thanks, yes.

We're still using control-tower, so I've been adding & updating issues partly in case the project gets revived and partly for my own reference.

I suppose eventually we'll need to either fork this or move away (either to another mechanism for hosting Concourse, or to another CI).

Please let me know if you have any recommendations for replacements for control-tower