You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@ozone.apache.org by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/07/31 14:48:00 UTC

[jira] [Updated] (HDDS-16047) Certificate renewal stops permanently after an unexpected failure

     [ https://issues.apache.org/jira/browse/HDDS-16047?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

ASF GitHub Bot updated HDDS-16047:
----------------------------------
    Labels: pull-request-available  (was: )

> Certificate renewal stops permanently after an unexpected failure
> -----------------------------------------------------------------
>
>                 Key: HDDS-16047
>                 URL: https://issues.apache.org/jira/browse/HDDS-16047
>             Project: Apache Ozone
>          Issue Type: Bug
>          Components: Certificates, Security
>    Affects Versions: 2.2.0
>            Reporter: Sergey Soldatov
>            Assignee: Sergey Soldatov
>            Priority: Major
>              Labels: pull-request-available
>
> CertificateRenewerService is submitted with scheduleAtFixedRate. If the task throws an unchecked exception, the executor cancels every further execution, and the exception is only stored in a Future that nobody inspects, so nothing is logged. The component then never renews its certificate again.
>  The failure is silent when it happens and only becomes visible days later, when the certificate reaches its expiry, and the service can no longer authenticate to the cluster. Recovery needs a restart, and by then there is no evidence of what stopped the renewal.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@ozone.apache.org
For additional commands, e-mail: issues-help@ozone.apache.org