Uploaded image for project: 'Apache Ozone'
  1. Apache Ozone
  2. HDDS-7332 Automatic certificate rotation before certificate expiration
  3. HDDS-9066

Remove the renew logic added by HDDS-7453

    XMLWordPrintableJSON

Details

    • Sub-task
    • Status: Resolved
    • Major
    • Resolution: Fixed
    • 1.4.0
    • 1.4.0
    • None

    Description

      There are two reasons for removing the functionality added by HDDS-7453.

      • The certificates now are renewed when necessary by a background service, that also runs at startup
      • Running the two logic in parallel, causes a race, which in extreme cases can lead to service startup failure, but in most cases it results in multiple certificates being generated in parallel for a service unnecessarily.

      Attachments

        Issue Links

          fixes

          Sub-task - The sub-task of the issue HDDS-9042 [ozone-cert-rotation][ozone] Multiple InternalCA were created

          • Critical - Crashes, loss of data, severe memory leak.
          • Resolved

          Bug - A problem which impairs or prevents the functions of the product. HDDS-9061 Possible dead-lock in SCM initialization due to certificate operations.

          • Critical - Crashes, loss of data, severe memory leak.
          • Resolved
          is related to

          Sub-task - The sub-task of the issue HDDS-7453 Check certificate expiration at service startup, renew if necessary

          • Blocker - Blocks development and/or testing work, production could not run
          • Resolved
          links to

          Web Link GitHub Pull Request #5107

          Activity

            People

              pifta István Fajth
              pifta István Fajth
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: