Skip to content
Snippets Groups Projects

new robot cert for gwskynet

Merged new robot cert for gwskynet
new-skynet-cert into master
Merged Alexander Pace requested to merge new-skynet-cert into master

Merge request reports

Loading
Loading

Activity

Filter activity
  • Approvals
  • Assignees & reviewers
  • Comments (from bots)
  • Comments (from users)
  • Commits & branches
  • Edits
  • Labels
  • Lock status
  • Mentions
  • Merge request status
  • Tracking
  • Alexander Pace merged

    merged

  • Alexander Pace mentioned in merge request !223 (merged)

    mentioned in merge request !223 (merged)

  • Peter Couvares
    Peter Couvares @pfc ·
    Developer

    Dumb question: what's the process (if any) for remembering/knowing when a robot cert needs to be renewed? I.e., what's to stop jobs from failing in future when this certificate expires?

    Edited by Peter Couvares
  • Alexander Pace
    Alexander Pace @alexander.pace ·
    Author Owner

    what's to stop jobs from failing in future when this certificate expires?

    nothing. and that's happened before for offline and online pipelines in low-latency.

    Dumb question: what's the process (if any) for remembering/knowing when a robot cert needs to be renewed?

    Not a dumb question. I believe @satyanarayan.raypitambarmohapatra has it configured that keytab owners get an automated email when the keytab is going to expire, which prompts owners to renew it. As for the certificate itself, it lasts ~11.5 days after it gets kinit'ed from the keytab, and there isn't any sort of acknowledgement to tell users that it's about to expire.

Please register or sign in to reply