Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-123887

[TNF] podman-etcd should automatically detect certificate rotation and restart etcd container

Linking RHIVOS CVEs to...Migration: Automation ...RHELPRIO AssignedTeam ...SWIFT: POC ConversionSync from "Extern...XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Undefined Undefined
    • rhel-9.8
    • rhel-9.6
    • resource-agents
    • None
    • resource-agents-4.10.0-90.el9
    • None
    • Moderate
    • OtherQA, ZStream
    • rhel-ha
    • 13
    • 26
    • 1
    • False
    • False
    • Hide

      None

      Show
      None
    • No
    • None
    • Regression Exception
    • Unspecified Release Note Type - Unknown
    • Unspecified
    • Unspecified
    • Unspecified
    • None

      The etcd container, managed by podman-etcd, only loads new certificates upon start. Since certificate rotation doesn't trigger a node restart, the podman-etcd service must be updated to explicitly request an agent restart via Pacemaker. This will ensure the etcd container is properly reloaded to pick up the new certificates.

      See also https://issues.redhat.com/browse/OCPEDGE-1502

              rhn-engineering-oalbrigt Oyvind Albrigtsen
              rh-ee-clobrano Carlo Lobrano
              Oyvind Albrigtsen Oyvind Albrigtsen
              Douglas Hensel Douglas Hensel
              Votes:
              0 Vote for this issue
              Watchers:
              7 Start watching this issue

                Created:
                Updated: