starlingx/utilities
Code Issues Proposed changes

show-certs checks wrong etcd apiserver client certificate

Browse Source 
show-certs.sh script checks the wrong file for etcd apiserver
client certificate. As a result, from user point of view,
the certificate seems not renewed. For “etcd apiserver client
certificate  CERTIFICATE:”  show-certs.sh checks
“/etc/etcd/apiserver-etcd-client.crt” which is not correct.
Instead it should check:
“/etc/kubernetes/pki/apiserver-etcd-client.crt”.

Test Plan:

PASS: Run /usr/bin/kube-cert-rotation.sh and check if etcd apiserver
      client certificate were renewed.

Closes-Bug: 1986953
Signed-off-by: Karla Felix <karla.karolinenogueirafelix@windriver.com>
Change-Id: I1152ce3dea709b7f4b82ce4dd80f65a479d8badf
This commit is contained in:
Karla Felix 2022-08-15 11:07:28 -03:00
parent 77f1279b0c
commit e649130111
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
utilities/platform-util/scripts/show-certs.sh
View File

@ -363,7 +363,7 @@ PrintCertInfo-fromFile "DC-AdminEp-Server" "/etc/ssl/private/admin-ep-cert.pem"
PrintCertInfo-fromFile "etcd CA certificate" "/etc/etcd/ca.crt" "${RED}Manual${RESET}"
PrintCertInfo-fromFile "etcd client certificate" "/etc/etcd/etcd-client.crt" "${GREEN}Automatic${RESET}"
PrintCertInfo-fromFile "etcd server certificate" "/etc/etcd/etcd-server.crt" "${GREEN}Automatic${RESET}"
PrintCertInfo-fromFile "etcd apiserver client certificate" "/etc/etcd/apiserver-etcd-client.crt" "${GREEN}Automatic${RESET}"
PrintCertInfo-fromFile "etcd apiserver client certificate" "/etc/kubernetes/pki/apiserver-etcd-client.crt" "${GREEN}Automatic${RESET}"
# OpenStack Certificates
PrintCertInfo-fromFile "openstack" "/etc/ssl/private/openstack/cert.pem" "${RED}Manual${RESET}"