Certificates last 3 months so probably similar issues

root@deployment-cache-upload06:/etc/acmecerts/unified/live# openssl x509 -dates -noout -in rsa-2048.crt
notBefore=Jan 12 01:23:09 2021 GMT
notAfter=Apr 12 01:23:09 2021 GMT
root@deployment-cache-upload06:/etc/acmecerts/unified/live# touch /srv/trafficserver/tls/etc/ssl_multicert.config
root@deployment-cache-upload06:/etc/acmecerts/unified/live# systemctl reload trafficserver-tls.service

It should be up & running now.. I'm not really familiar with the cloud puppetization but this doesn't mimic production behaviour

But yeah I guess this should be fixed/monitored better so it doesn't need manual reload.

In T271808#6739592, @RhinosF1 wrote:

But yeah I guess this should be fixed/monitored better so it doesn't need manual reload.

Is that worth a dedicated followup ticket under observability and Beta-Cluster-Infrastructure ?

In T271808#6742982, @Aklapper wrote:

In T271808#6739592, @RhinosF1 wrote:

But yeah I guess this should be fixed/monitored better so it doesn't need manual reload.

Is that worth a dedicated followup ticket under observability and Beta-Cluster-Infrastructure ?

I'd say yes.

In T271808#6739578, @Vgutierrez wrote:

root@deployment-cache-upload06:/etc/acmecerts/unified/live# openssl x509 -dates -noout -in rsa-2048.crt
notBefore=Jan 12 01:23:09 2021 GMT
notAfter=Apr 12 01:23:09 2021 GMT
root@deployment-cache-upload06:/etc/acmecerts/unified/live# touch /srv/trafficserver/tls/etc/ssl_multicert.config
root@deployment-cache-upload06:/etc/acmecerts/unified/live# systemctl reload trafficserver-tls.service

It should be up & running now.. I'm not really familiar with the cloud puppetization but this doesn't mimic production behaviour

It should be roughly the same, we may have some differing hieradata.

In T271808#6743014, @RhinosF1 wrote:

In T271808#6742982, @Aklapper wrote:

In T271808#6739592, @RhinosF1 wrote:

But yeah I guess this should be fixed/monitored better so it doesn't need manual reload.

Is that worth a dedicated followup ticket under observability and Beta-Cluster-Infrastructure ?

I'd say yes.

We have T271778, which missed the upload part but does basically include this issue as the second bullet point.