canonical / opensearch-operator

OpenSearch operator
Apache License 2.0
13 stars 7 forks source link

CA Rotation fails with Manual TLS operator #448

Closed skourta closed 3 weeks ago

skourta commented 1 month ago

Steps to reproduce

  1. Deploy 3 units of openserach.
  2. Deploy manual-tls-certificates operator.
  3. Integrate them.
  4. Once everything is working, remove the relation and reintegrate them.
  5. Generate the new certificates with a new CA.

Expected behavior

The CA rotation process finishes and the cluster comes back to active/idle

Actual behavior

The leader unit is unable to start opensaerch after the rotation.

Versions

Operating system: Ubuntu 24.04.1 LTS

Juju CLI: 3.5.3

Juju agent: 3.5.3

Charm revision: feature/TLS-CA-rotation branch

LXD: 5.21.2 LTS

Log output

Juju debug log:

Additional context

syncronize-issues-to-jira[bot] commented 1 month ago

Thank you for reporting us your feedback!

The internal ticket has been created: https://warthogs.atlassian.net/browse/DPE-5504.

This message was autogenerated