canonical / nginx-ingress-integrator-operator

nginx-ingress-integrator-operator - charm repository.
Apache License 2.0
1 stars 8 forks source link

TLS certificate is removed on charm upgrade #138

Closed cbartz closed 5 months ago

cbartz commented 5 months ago

Bug Description

This seems to be related to https://github.com/canonical/nginx-ingress-integrator-operator/issues/137. When we upgrade the nginx-ingress-integrator charm, https is reset to http and the k8s certificate is removed.

To Reproduce

  1. juju refresh nginx-ingress-integrator --revision=96

Environment

stg-is-charms-demo@is-charms-bastion-ps6:~$ juju status
Model               Controller         Cloud/Region             Version  SLA          Timestamp
stg-is-charms-demo  prod  k8s/default  3.1.8    unsupported  11:50:39Z

App                       Version                  Status  Scale  Charm                     Channel     Rev  Address       Exposed  Message
httprequest-lego-k8s                               active      1  httprequest-lego-k8s      candidate    76  10.87.141.59  no       
mysql-k8s                 8.0.35-0ubuntu0.22.04.1  active      1  mysql-k8s                 8.0/stable  127  10.87.137.21  no       
nginx-ingress-integrator  24.2.0                   active      1  nginx-ingress-integrator  stable       96  10.87.50.112  no       Ingress IP(s): 10.142.8.139
wordpress-k8s             6.4.3                    active      1  wordpress-k8s             stable       87  10.87.127.24  no       

Unit                         Workload  Agent  Address          Ports  Message
httprequest-lego-k8s/0*      active    idle   192.168.102.25          
mysql-k8s/0*                 active    idle   192.168.102.44          Primary
nginx-ingress-integrator/0*  active    idle   192.168.102.20          Ingress IP(s): 10.142.8.139
wordpress-k8s/0*             active    idle   192.168.100.130 

Relevant log output

unit-nginx-ingress-integrator-0: 11:24:31 DEBUG unit.nginx-ingress-integrator/0.juju-log ops 2.13.0 up and running.
unit-nginx-ingress-integrator-0: 11:24:31 DEBUG unit.nginx-ingress-integrator/0.juju-log Emitting Juju event config_changed
unit-nginx-ingress-integrator-0: 11:24:31 WARNING unit.nginx-ingress-integrator/0.juju-log Certificate not yet available for is-charms-blog.staging.canonical.com
unit-nginx-ingress-integrator-0: 11:24:31 INFO unit.nginx-ingress-integrator/0.juju-log service updated in namespace stg-is-charms-demo with name relation-124-wordpress-k8s-service
unit-nginx-ingress-integrator-0: 11:24:31 INFO unit.nginx-ingress-integrator/0.juju-log Using ingress class nginx-ingress-controller as it is the cluster's default
unit-nginx-ingress-integrator-0: 11:24:31 INFO unit.nginx-ingress-integrator/0.juju-log ingress updated in namespace stg-is-charms-demo with name relation-124-is-charms-blog-staging-canonical-com-ingress
unit-nginx-ingress-integrator-0: 11:24:31 INFO unit.nginx-ingress-integrator/0.juju-log endpoints deleted in namespace stg-is-charms-demo with name relation-124-wordpress-k8s-service
unit-nginx-ingress-integrator-0: 11:24:31 INFO unit.nginx-ingress-integrator/0.juju-log endpoint slice deleted in namespace stg-is-charms-demo with name relation-124-wordpress-k8s-service-8nkks
unit-nginx-ingress-integrator-0: 11:24:31 INFO unit.nginx-ingress-integrator/0.juju-log secret deleted in namespace stg-is-charms-demo with name nginx-ingress-integrator-cert-tls-secret-is-charms-blog.staging.canonical.com
unit-nginx-ingress-integrator-0: 11:24:32 INFO juju.worker.uniter.operation ran "config-changed" hook (via hook dispatching script: dispatch)

unit-nginx-ingress-integrator-0: 11:24:33 DEBUG unit.nginx-ingress-integrator/0.juju-log Emitting Juju event start.
unit-nginx-ingress-integrator-0: 11:24:33 WARNING unit.nginx-ingress-integrator/0.juju-log Certificate not yet available for is-charms-blog.staging.canonical.com
unit-nginx-ingress-integrator-0: 11:24:33 INFO unit.nginx-ingress-integrator/0.juju-log service updated in namespace stg-is-charms-demo with name relation-124-wordpress-k8s-service
unit-nginx-ingress-integrator-0: 11:24:33 INFO unit.nginx-ingress-integrator/0.juju-log Using ingress class nginx-ingress-controller as it is the cluster's default
unit-nginx-ingress-integrator-0: 11:24:33 INFO unit.nginx-ingress-integrator/0.juju-log ingress updated in namespace stg-is-charms-demo with name relation-124-is-charms-blog-staging-canonical-com-ingress
unit-nginx-ingress-integrator-0: 11:24:33 INFO unit.nginx-ingress-integrator/0.juju-log endpoints deleted in namespace stg-is-charms-demo with name relation-124-wordpress-k8s-service
unit-nginx-ingress-integrator-0: 11:24:33 INFO unit.nginx-ingress-integrator/0.juju-log endpoint slice deleted in namespace stg-is-charms-demo with name relation-124-wordpress-k8s-service-fqp5f
unit-nginx-ingress-integrator-0: 11:24:33 INFO juju.worker.uniter.operation ran "start" hook (via hook dispatching script: dispatch)

Additional context

No response