Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-56108

Fire an alert when the ingress certificate is about to expire

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Duplicate
    • Icon: Undefined Undefined
    • None
    • 4.19.0
    • Networking / router
    • None
    • Quality / Stability / Reliability
    • False
    • Hide

      None

      Show
      None
    • 0
    • None
    • None
    • None
    • None
    • None
    • NI&D Sprint 271
    • 1
    • None
    • None
    • None
    • None
    • None
    • None
    • None

      Description of problem:

      When an OpenShift cluster is configured with a valid certificate (not self-signed), signed by the CA of the organization, there should be an alert fired that warns the cluster-admins that the certificate is about to expire, several days (or even a week) before the expiration time.

      Version-Release number of selected component (if applicable):

      all versions

      How reproducible:

      Always

      Steps to Reproduce:

      1. Set up a valid certificate signed by the CA.
      2. Put the secret that contains the certificate at the IngressController's .spec.defaultCertificate
      3. Wait till the valid cert is expiring
          

      Actual results:

      Note that there is no error/warning that the certificate is about to expire. Upon expiration, users will get a certificate warning on the browser when accessing the cluster's ingress / UI console    

      Expected results:

      We would like to get some kind of a warning / alert that the valid certificate is about to expire, several days before the actual expiration time of the certificate

      Additional info:

          

              nid-team-bot NID Team Bot
              ocohen@redhat.com Oren Cohen
              None
              Shirly Radco
              Hongan Li Hongan Li
              None
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

                Created:
                Updated:
                Resolved: