Bug 1768901

Summary: Emit events when certs are rotated
Product: OpenShift Container Platform Reporter: Maciej Szulik <maszulik>
Component: kube-controller-managerAssignee: Maciej Szulik <maszulik>
Status: CLOSED ERRATA QA Contact: zhou ying <yinzhou>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 4.2.0CC: aos-bugs, mfojtik
Target Milestone: ---   
Target Release: 4.2.z   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: No Doc Update
Doc Text:
Story Points: ---
Clone Of:
: 1771995 (view as bug list) Environment:
Last Closed: 2020-05-13 11:07:17 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 1771995    
Bug Blocks:    

Description Maciej Szulik 2019-11-05 13:55:12 UTC
When cert-rotation happens we have no clear information when and why it happened, or why it failed, or what kind of problems it had.

Comment 8 Maciej Szulik 2019-11-26 21:22:01 UTC
This should be fixed when https://github.com/openshift/cluster-kube-controller-manager-operator/pull/314 merges

Comment 12 zhou ying 2020-05-06 06:29:31 UTC
Confrimed with payload: 4.2.0-0.nightly-2020-05-05-113123, the issue has fixed:

[root@dhcp-140-138 roottest]# oc get clusterversion 
NAME      VERSION                             AVAILABLE   PROGRESSING   SINCE   STATUS
version   4.2.0-0.nightly-2020-05-05-113123   True        False         102m    Cluster version is 4.2.0-0.nightly-2020-05-05-113123

[root@dhcp-140-138 roottest]# oc get events |grep -i certificate
44m         Normal    CertificateUpdated            pod/kube-controller-manager-ip-10-0-141-223.us-east-2.compute.internal   Wrote updated configmap: openshift-kube-controller-manager/client-ca
41m         Normal    CertificateUpdated            pod/kube-controller-manager-ip-10-0-141-223.us-east-2.compute.internal   Wrote updated configmap: openshift-kube-controller-manager/aggregator-client-ca

Comment 14 errata-xmlrpc 2020-05-13 11:07:17 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2020:2023