Sergey Soldatov created HDDS-16047:
--------------------------------------
Summary: Certificate renewal stops permanently after an unexpected
failure
Key: HDDS-16047
URL: https://issues.apache.org/jira/browse/HDDS-16047
Project: Apache Ozone
Issue Type: Bug
Components: Certificates, Security
Affects Versions: 2.2.0
Reporter: Sergey Soldatov
Assignee: Sergey Soldatov
CertificateRenewerService is submitted with scheduleAtFixedRate. If the task
throws an unchecked exception, the executor cancels every further execution,
and the exception is only stored in a Future that nobody inspects, so nothing
is logged. The component then never renews its certificate again.
The failure is silent when it happens and only becomes visible days later,
when the certificate reaches its expiry, and the service can no longer
authenticate to the cluster. Recovery needs a restart, and by then there is no
evidence of what stopped the renewal.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
