Loading...

XML

Word

Printable

Type: Feature
Resolution: Unresolved
Priority: Major
Fix Version/s: openshift-4.20
Affects Version/s: None
Component/s: API & Datastore
Labels:

Activity Type:
Product / Portfolio Work
Parent Link:
None
Hierarchy Progress Bar:

0% To Do, 0% In Progress, 100% Done
Status Summary:

Hide

Date : 8/13/2025
Color Status: Green
Status Summary:
Have a number of PRs for bug fixes and test changes awaiting a good nightly.

Show
Date : 8/13/2025 Color Status: Green Status Summary: Have a number of PRs for bug fixes and test changes awaiting a good nightly.
Blocked:
False
Blocked Reason:

Hide

None

Show
None
Ready:
False
Size:
None

Target Version:

openshift-4.20
Release Blocker:
None

SFDC Cases Counter:
SFDC Cases Open:
SFDC Cases Links:

PX Review Complete:
PX Priority Data:
None
PX Impact Score:
PX Technical Impact:
None
PX Impact Range:
None
PX Scheduling Request:
None
PX Technical Impact Notes:

Intelligence Requested:
Market:

Feature Overview

OpenShift relies on internal certificates for communication between components, with automatic rotations ensuring security. For critical components like the API server, rotations occur via a rollout process, replacing certificates one instance at a time.

In clusters with high transaction rates and SNO, this can lead to transient errors for in-flight transactions during the transition.

This feature ensures seamless TLS certificate rotations in OpenShift, eliminating downtime for the Kubernetes API server during certificate updates, even under heavy loads or in SNO deployments.

relates to

API-1579 Stability: Disruption resulting from cert rotation