Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

bug: only skip bootstrap when we have certs #289

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

evans915
Copy link

@evans915 evans915 commented Sep 30, 2024

Name of feature: Fixing bootstrapper skip logic

Pain or issue this feature alleviates:

user@NODE:~$ kubectl logs -n namespace service-b577877c9-mfl7v autocert-renewer
error reading certificate chain: : no such file or directory

user@NODE:~$ kubectl logs -n namespace service-b577877c9-mfl7v autocert-bootstrapper
Found existing /var/run/autocert.step.sm/root.crt, skipping bootstrap

Why is this important to the project (if not answered above):

Because after a node drain running kubernetes deployments, when the node schedules pods again the root cert seems to exist, but the leaf certificate and key does not. This ends up causing pods to become stuck in CrashLoopBackOff

Is there documentation on how to use this feature? If so, where?

N/A

In what environments or workflows is this feature supported?

Kubernetes clusters

In what environments or workflows is this feature explicitly NOT supported (if any)?

N/A

Supporting links/other PRs/issues:

In response to this PR:
#174

💔Thank you!

@github-actions github-actions bot added the needs triage Waiting for discussion / prioritization by team label Sep 30, 2024
@evans915 evans915 marked this pull request as ready for review September 30, 2024 15:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
needs triage Waiting for discussion / prioritization by team
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant