Skip to content

Conversation

@arif-ali
Copy link
Contributor

@arif-ali arif-ali commented Dec 15, 2025

Tests for the charm changes as suggested from canonical/charm-ovn-central#11

arif-ali added a commit to arif-ali/charm-ovn-central that referenced this pull request Dec 15, 2025
There are times when the certificate expires, and the charm goes into error
state. This change ensures the right message is displayed, and the right actions
can be taken. In errored state the vault reissue action doesn't work, this
update would allow for the certs to be updated as the charm is not in error
state.

func-test-pr: openstack-charmers/zaza-openstack-tests#1332

Signed-off-by: Arif Ali <[email protected]>
arif-ali added a commit to arif-ali/charm-ovn-central that referenced this pull request Dec 15, 2025
There are times when the certificate expires, and the charm goes into error
state. This change ensures the right message is displayed, and the right actions
can be taken. In errored state the vault reissue action doesn't work, this
update would allow for the certs to be updated as the charm is not in error
state.

func-test-pr: openstack-charmers/zaza-openstack-tests#1332

Signed-off-by: Arif Ali <[email protected]>
arif-ali added a commit to arif-ali/charm-ovn-central that referenced this pull request Dec 15, 2025
There are times when the certificate expires, and the charm goes into error
state. This change ensures the right message is displayed, and the right actions
can be taken. In errored state the vault reissue action doesn't work, this
update would allow for the certs to be updated as the charm is not in error
state.

func-test-pr: openstack-charmers/zaza-openstack-tests#1332

Signed-off-by: Arif Ali <[email protected]>
arif-ali added a commit to arif-ali/charm-ovn-central that referenced this pull request Dec 15, 2025
There are times when the certificate expires, and the charm goes into error
state. This change ensures the right message is displayed, and the right actions
can be taken. In errored state the vault reissue action doesn't work, this
update would allow for the certs to be updated as the charm is not in error
state.

Func-test-pr: openstack-charmers/zaza-openstack-tests#1332

Signed-off-by: Arif Ali <[email protected]>
@arif-ali arif-ali force-pushed the zaza-arif-ovn-cert-renewal branch 7 times, most recently from ea41cdc to 91496b4 Compare December 16, 2025 15:22
@arif-ali arif-ali force-pushed the zaza-arif-ovn-cert-renewal branch from 91496b4 to 0db88f6 Compare December 17, 2025 12:01
@arif-ali arif-ali marked this pull request as ready for review December 17, 2025 18:27
Copy link
Contributor

@mkalcok mkalcok left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you for the improvement @arif-ali. LGTM.
OVN central tests completed successfully with this: canonical/charm-ovn-central#11

One question, is this test ovn-central specific? Or could it be called just OVNSSLExpireTests. And more importantly, does it make sense to introduce it to OVN chassis and dedicated chassis as well?

@arif-ali
Copy link
Contributor Author

This is ovn-central specific. The issue is not apparent on the ovn-chassis charms, at least we didn't face this as an issue.

The certs for ovn-chassis get updated without any problems. In-fact I don't think the ovn-chassis charm checks for the ovn-chassis service liveness in the same way that ovn-central does.

@mkalcok mkalcok merged commit 42f49f6 into openstack-charmers:master Dec 18, 2025
3 checks passed
@mkalcok
Copy link
Contributor

mkalcok commented Dec 18, 2025

Ack. Thanks. I wasn't sure of the top off my head about how client-side certs are handled in chassis charms.

arif-ali added a commit to arif-ali/charm-ovn-central that referenced this pull request Dec 19, 2025
There are times when the certificate expires, and the charm goes into error
state. This change ensures the right message is displayed, and the right actions
can be taken. In errored state the vault reissue action doesn't work, this
update would allow for the certs to be updated as the charm is not in error
state.

Func-test-pr: openstack-charmers/zaza-openstack-tests#1332

Signed-off-by: Arif Ali <[email protected]>
arif-ali added a commit to arif-ali/charm-ovn-central that referenced this pull request Jan 8, 2026
There are times when the certificate expires, and the charm goes into error
state. This change ensures the right message is displayed, and the right actions
can be taken. In errored state the vault reissue action doesn't work, this
update would allow for the certs to be updated as the charm is not in error
state.

Func-test-pr: openstack-charmers/zaza-openstack-tests#1332

Signed-off-by: Arif Ali <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants