-
Story
-
Resolution: Duplicate
-
Undefined
-
None
-
None
-
False
-
None
-
False
-
-
Description of problem:
Currently, it's not possible to manually rotate the ETCD signer certificates. This may be required under certain scenarios.
Version-Release number of selected component (if applicable):
All releases
How reproducible:
Always
Steps to Reproduce:
1. Delete signer certs
oc -n openshift-config delete secret etcd-signer
oc -n openshift-config delete secret etcd-metric-signer
Actual results:
New signer certs won't be generated
Expected results:
New signer certs generated, new serving and client certs issued by the new signer certs and ETCD components restarted to use them.
Additional info:
Some telco customers are requesting this feature, an RFE was opened. https://issues.redhat.com/browse/RFE-3276
- duplicates
-
OCPBUGS-8296 metrics signer certificate inside openshift-etcd should be copied from the one in openshift-config
-
- Closed
-
