Uploaded image for project: 'OpenShift Etcd'
  1. OpenShift Etcd
  2. ETCD-611

update manual rotation tests in origin

XMLWordPrintable

    • Icon: Story Story
    • Resolution: Done
    • Icon: Undefined Undefined
    • None
    • None
    • None
    • BU Product Work
    • 3
    • False
    • None
    • False
    • OCPSTRAT-1422 - [etcd] Automatic rotation of etcd signer certs when the cluster is still online
    • ETCD Sprint 255, ETCD Sprint 256

      in ETCD-565 we have added tests to manually rotate certificate.

      In the recovery test suite, depending on the order of execution we have the following failures:

       1. : [sig-etcd][Feature:CertRotation][Suite:openshift/etcd/recovery] etcd can recreate trust bundle [Timeout:15m]

      Here the tests usually time out waiting for a revision rollout - couldn't find a deeper cause, maybe the timeout is not large enough.

      2. : [sig-etcd][Feature:CertRotation][Suite:openshift/etcd/recovery] etcd can recreate dynamic certificates [Timeout:15m]

      The recovery test suite creates several new nodes. When choosing a peer secret, we sometimes choose one that has no member/node anymore and thus it will never be recreated.

      3. after https://github.com/openshift/cluster-etcd-operator/pull/1269

      After the leaf gating has merged, some certificates are not in their original place anymore, which invalidates the manual rotation procedure

            tjungblu@redhat.com Thomas Jungblut
            tjungblu@redhat.com Thomas Jungblut
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated:
              Resolved: