Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Reload TLS certificate in the process manager #702

Closed
sebgl opened this issue Apr 30, 2019 · 1 comment
Closed

Reload TLS certificate in the process manager #702

sebgl opened this issue Apr 30, 2019 · 1 comment
Labels
>bug Something isn't working

Comments

@sebgl
Copy link
Contributor

sebgl commented Apr 30, 2019

TLS certificate are mounted into Elasticsearch pods through a secret volumes, and used by the process-manager.
When a certificate is close to expire, the operator signs a new one, propagated through the secret volume. Elasticsearch reloads it automatically when a change is detected on disk.

Since we don't do the same in the process-manager, we keep on using an old outdated certificate. The operator detects an expired certificate when issuing requests to the process-manager and returns an error, preventing restarts to happen correctly.

@sebgl sebgl added >bug Something isn't working loe:medium labels Apr 30, 2019
@sebgl sebgl added this to the Alpha milestone Apr 30, 2019
@pebrc pebrc removed this from the Alpha milestone May 10, 2019
@thbkrkr
Copy link
Contributor

thbkrkr commented Jul 12, 2019

Closing as we decided to retire the process manager see #1199.

@thbkrkr thbkrkr closed this as completed Jul 12, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
>bug Something isn't working
Projects
None yet
Development

No branches or pull requests

3 participants