redhat-cop / cert-utils-operator

Set of functionalities around certificates packaged in a Kubernetes operator
Apache License 2.0
95 stars 35 forks source link

Possible Issue stemming from null password on keystore #117

Closed jdziedzic closed 2 years ago

jdziedzic commented 2 years ago

We are seeing a near constant error in the cert-utils manager log that looks like this:

2022-02-15T19:28:46.032Z    DEBUG   controllers.secret_to_keystore_contoller    updating with   {"secret_to_keystore_contoller": "eu-si-1-sys/plansponsor-assembly-1-ingress-cert", "instance": {"apiVersion": "v1", "kind": "Secret", "namespace": "eu-si-1-sys", "name": "plansponsor-assembly-1-ingress-cert"}, "key len": 3, "resource version": "4667375687"}
2022-02-15T19:28:46.085Z    DEBUG   util.api    object is not ConditionsAware, not setting status
2022-02-15T19:28:46.085Z    INFO    controllers.secret_to_keystore_contoller    retrieved   {"creation time": "2022-02-07T19:41:05.000Z"}
2022-02-15T19:28:46.085Z    ERROR   controllers.secret_to_keystore_contoller    unable to get private key entry for {"alias": "alias", "error": "decrypt private key: got invalid digest"}

I am not sure if this is due to the change from the password being " " to now having a valid password and it can't open the keystore in a previously created secret, or if there is another issue. Any ideas?