From ef498b54b6f154d4084bc13eb2df3361f1aa14b5 Mon Sep 17 00:00:00 2001 From: Karla Felix Date: Fri, 29 Jul 2022 11:57:09 -0300 Subject: [PATCH] shows some of the etcd certs AutoRenewal=Automatic The output of 'sudo show-certs.sh' should show the ETCD client cert, ETCD server cert and ETCD apiserevert client cert as 'Renewal: Automatic' in starlingx 22.06 ( ... it shows it incorrectly as 'Renewal: Manual' ) Test Plan: PASS: Run "sudo show-certs.sh" and check if etcd certs were shown as 'AutoRenewal=Automatic' Closes-bug: 1982109 Change-Id: Ie1ec4770362b550456703d5f25b1cbe67c4511c7 --- utilities/platform-util/scripts/show-certs.sh | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/utilities/platform-util/scripts/show-certs.sh b/utilities/platform-util/scripts/show-certs.sh index cada0df8..efc637dd 100755 --- a/utilities/platform-util/scripts/show-certs.sh +++ b/utilities/platform-util/scripts/show-certs.sh @@ -359,10 +359,11 @@ fi PrintCertInfo-fromFile "DC-AdminEp-Server" "/etc/ssl/private/admin-ep-cert.pem" "${GREEN}$AUTO_LABEL${RESET}" # ETCD CA +# ETCD certificates are automatically renewed by kube_root_ca_rotation cron job PrintCertInfo-fromFile "etcd CA certificate" "/etc/etcd/ca.crt" "${RED}Manual${RESET}" -PrintCertInfo-fromFile "etcd client certificate" "/etc/etcd/etcd-client.crt" "${RED}Manual${RESET}" -PrintCertInfo-fromFile "etcd server certificate" "/etc/etcd/etcd-server.crt" "${RED}Manual${RESET}" -PrintCertInfo-fromFile "etcd apiserver client certificate" "/etc/etcd/apiserver-etcd-client.crt" "${RED}Manual${RESET}" +PrintCertInfo-fromFile "etcd client certificate" "/etc/etcd/etcd-client.crt" "${GREEN}Automatic${RESET}" +PrintCertInfo-fromFile "etcd server certificate" "/etc/etcd/etcd-server.crt" "${GREEN}Automatic${RESET}" +PrintCertInfo-fromFile "etcd apiserver client certificate" "/etc/etcd/apiserver-etcd-client.crt" "${GREEN}Automatic${RESET}" # OpenStack Certificates PrintCertInfo-fromFile "openstack" "/etc/ssl/private/openstack/cert.pem" "${RED}Manual${RESET}"