starlingx/utilities
Code Issues Proposed changes

shows some of the etcd certs AutoRenewal=Automatic

Browse Source 
The output of 'sudo show-certs.sh' should show
the ETCD client cert, ETCD server cert and ETCD apiserevert
client cert as 'Renewal: Automatic' in starlingx 22.06
( ... it shows it incorrectly as 'Renewal: Manual' )

Test Plan:

PASS: Run "sudo show-certs.sh" and check if etcd certs were
      shown as 'AutoRenewal=Automatic'

Closes-bug: 1982109
Change-Id: Ie1ec4770362b550456703d5f25b1cbe67c4511c7
This commit is contained in:
Karla Felix 2022-07-29 11:57:09 -03:00
parent c2692f2ccb
commit ef498b54b6
1 changed files with 4 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
utilities/platform-util/scripts/show-certs.sh
View File

@ -359,10 +359,11 @@ fi
PrintCertInfo-fromFile "DC-AdminEp-Server" "/etc/ssl/private/admin-ep-cert.pem" "${GREEN}$AUTO_LABEL${RESET}"
# ETCD CA
# ETCD certificates are automatically renewed by kube_root_ca_rotation cron job
PrintCertInfo-fromFile "etcd CA certificate" "/etc/etcd/ca.crt" "${RED}Manual${RESET}"
PrintCertInfo-fromFile "etcd client certificate" "/etc/etcd/etcd-client.crt" "${RED}Manual${RESET}"
PrintCertInfo-fromFile "etcd server certificate" "/etc/etcd/etcd-server.crt" "${RED}Manual${RESET}"
PrintCertInfo-fromFile "etcd apiserver client certificate" "/etc/etcd/apiserver-etcd-client.crt" "${RED}Manual${RESET}"
PrintCertInfo-fromFile "etcd client certificate" "/etc/etcd/etcd-client.crt" "${GREEN}Automatic${RESET}"
PrintCertInfo-fromFile "etcd server certificate" "/etc/etcd/etcd-server.crt" "${GREEN}Automatic${RESET}"
PrintCertInfo-fromFile "etcd apiserver client certificate" "/etc/etcd/apiserver-etcd-client.crt" "${GREEN}Automatic${RESET}"
# OpenStack Certificates
PrintCertInfo-fromFile "openstack" "/etc/ssl/private/openstack/cert.pem" "${RED}Manual${RESET}"