canonical / charm-openstack-service-checks

Collection of Nagios checks and other utilities that can be used to verify the operation of an OpenStack cluster
0 stars 2 forks source link

Implement "certificates" interface to enable automatic CA provisioning #108

Open sudeephb opened 7 months ago

sudeephb commented 7 months ago

Hello,

We need to implement "certificates" interface for openstack-service-checks charm to enable automatic CA provisioning via "juju add-relation osc vault" or by configuring relations in bundles.

Right now there is a workaround how to do this:

juju run-action \
    --wait vault/0 get-root-ca --format json \
    | jq -r '."unit-vault-0".results.output' \
    | base64 -w 0 \
    | xargs -I {} juju config openstack-service-checks trusted_ssl_ca={}

But it is not so obvious so user faces bugs like that: https://bugs.launchpad.net/charm-openstack-service-checks/+bug/1926168

Best Regards, Alex.


Imported from Launchpad using lp2gh.