Comment 8 for bug 1909425

Revision history for this message
Aurelien Lourot (aurelien-lourot) wrote :

No, I misread, my mistake, I understand now. You're seeing the following error message in the logs:

unit-vault-0: 03:40:00 ERROR unit.vault/0.juju-log certificates:10: cannot satisfy request, as TTL would result in notAfter 2030-12-26T02:40:00.829770137Z that is beyond the expiration of the CA certificate at 2030-10-15T09:14:03Z

But this error isn't fatal and makes it hard later on to understand why things aren't working. I believe this is the culprit: https://opendev.org/openstack/charm-vault/src/branch/master/src/reactive/vault_handlers.py#L938

----------
        except vault.VaultInvalidRequest as e:
            log(str(e), level=ERROR)
            continue # TODO: report failure back to client
----------