Page MenuHomePhabricator

[epic] The SSL certificate for Beta cluster domains fails to properly renew & deploy
Closed, ResolvedPublic

Description

Tracking task.

Related Objects

Event Timeline

RhinosF1 renamed this task from [epic] The SSL certificate for Beta cluster domains fails to be renewed in time to [epic] The SSL certificate for Beta cluster domains fails to properly renew & deploy.Oct 17 2021, 10:21 PM
Dzahn triaged this task as High priority.Oct 18 2021, 6:26 PM
Dzahn lowered the priority of this task from High to Medium.Oct 18 2021, 6:38 PM

We got alerts about the Beta Cluster cert being close to expiry (T311457#8147086) so I again ran:

$ touch /srv/trafficserver/tls/etc/ssl_multicert.config && systemctl reload trafficserver-tls.service

On deployment-cache-{text,upload}06.

Can someone do the thing again? It expired today.

Joe raised the priority of this task from Medium to High.Oct 17 2022, 7:54 AM
Joe added a subscriber: Joe.

Please Traffic take a look at this problem. I have solved the immediate issue.

The current deployment-prep instances are pretty far from our current production environment, ats-tls is not longer maintained nor ATS 8.x for the backend instance.

Vgutierrez claimed this task.

I've updated the deployment-cache instances. This should be fixed as a side effect of moving away from ats-tls to HAProxy