microsoft / service-fabric

Service Fabric is a distributed systems platform for packaging, deploying, and managing stateless and stateful distributed applications and containers at large scale.
https://docs.microsoft.com/en-us/azure/service-fabric/
MIT License
3.02k stars 399 forks source link

Removal of Azure PowerShell command to add new Cluster certificate #1151

Open CodedBeard opened 3 years ago

CodedBeard commented 3 years ago

Service Fabric Runtime Version: 7.2.432.9590

Environment: Azure

Description: As per the discussion on the community call. In previous years when our cluster certificate expired, a member of the infrastrucutre team would run the Add-AzServiceFabricClusterCertificate command to install a new certificate to the cluster, and then perform a swap. This year, my colleagues were concerend to discover that this command has been removed from the Azure PowerShell module, and the documentation now advises that the certificate should be updated via an ARM template redeploy. Having never deployed a SF ARM template before, and with the cluster in question being online since 2017 (the original ARM template has been lost) they didn't want to risk deploying a new ARM template and breaking the otherwise working cluster.

Observed behavior: Requires knowledge of ARM deployments of SF clusters Expected Behavior: Simple command can be run to update the certificate on a working cluster. OS(Windows/Linux): Windows


Assignees: /cc @microsoft/service-fabric-triage

CodedBeard commented 3 years ago

@athinanthny teams wouldn't let me post after the meeting ended, so hopefully I've got your handle correct.