github-actions[bot] commented on issue #12795: URL: https://github.com/apache/cloudstack/issues/12795#issuecomment-5294166510
## ๐ฏ Triage report On KVM hosts with `ca.plugin.root.auth.strictness=true`, certificate provisioning triggers an agent restart during which `PostCertificateRenewalTask.runInContext()` throws `IllegalStateException: Shutdown in progress` while removing a shutdown hook. This prevents the `secured` flag from ever being set to `true`, so the host permanently shows "Unsecure" in the UI even though the TLS connection actually works. ### ๐ Assessment | Dimension | Value | Reasoning | |---|---|---| | **Type** | type:bug | Race condition during JVM shutdown causes a persistent, incorrect UI/DB state despite functioning TLS | | **Component** | component:kvm, component:agent | KVM host agent (`Agent.java`) certificate renewal/reconnect logic | | **Severity** | Severity:Minor | Cosmetic/status issue only โ TLS connection is functionally secure; DB workaround exists (though it gets overwritten on next restart) | | **Labels** | type:bug, component:kvm, component:agent, Severity:Minor | | | **Coding agent** | Suitable | Root cause, exact stack trace, file/line, and a concrete minimal fix (catch `IllegalStateException` around `removeShutdownHook`) are all provided | ### ๐ Similar issues No duplicate or closely related open issues found. <details><summary>๐ก Notes and suggestions</summary> - Consider whether `secured` should also be derived independently from actual TLS handshake success rather than solely relying on this task completing cleanly, to make the state more robust against future race conditions. - A regression test simulating a shutdown-hook removal during JVM shutdown (mocking `Runtime`) could help prevent recurrence. </details> > Generated by [Daily Issue Triage](https://github.com/apache/cloudstack/actions/runs/31806898936) ยท sonnet50 357.5K ยท [โท](https://github.com/search?q=repo%3Aapache%2Fcloudstack+%22gh-aw-workflow-call-id%3A+apache%2Fcloudstack%2Fdaily-issue-triage%22&type=issues) > <details> <summary>Add this agentic workflows to your repo</summary> To install this agentic workflow, run ``` gh aw add githubnext/agentics/workflows/daily-issue-triage.md@d7c1dc4b72b00607a67caaffdcc216cb64379cf9 ``` </details> <!-- gh-aw-agentic-workflow: Daily Issue Triage, engine: copilot, version: 1.0.52, model: claude-sonnet-5, id: 31806898936, workflow_id: daily-issue-triage, run: https://github.com/apache/cloudstack/actions/runs/31806898936 --> <!-- gh-aw-workflow-call-id: apache/cloudstack/daily-issue-triage --> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
