-
Feature Request
-
Resolution: Done
-
Normal
-
None
-
None
-
False
-
False
-
Undefined
-
-
-
-
-
- What is the nature and description of the request?
If the customer deletes the etcd secrets/signers by mistake, there should be a way to recover, either by:
- automatic generation of new signers
-
- Detect signers/certs were deleted, and trigger a new signer/cert generation.
- or, by using Disaster Recovery
- Use currently functional etcd database for recovery.
- Restore should trigger regeneration of the signers and certs
- etcd scales back to single member
- generates new signers
- restarts with new certs
- scales up.
- Use the signer and cert files on the disk to restore deleted signers.
2. Why does the customer need this? (List the business requirements here)
Accidental deletion of resources due to human error can lead customer to a situation where they cannot recover.
Here is an example of such a situation:
https://bugzilla.redhat.com/show_bug.cgi?id=1889003
3. List any affected packages or components.
Openshift 4 etcd and etcd operator.
- is incorporated by
-
OCPSTRAT-370 Update ETCD datastore encryption to use AES-GCM instead of AES-CBC
- Closed