Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

provider: check cert expiration locally #219

Closed
arno01 opened this issue Aug 31, 2023 · 1 comment
Closed

provider: check cert expiration locally #219

arno01 opened this issue Aug 31, 2023 · 1 comment

Comments

@arno01
Copy link
Contributor

arno01 commented Aug 31, 2023

We are currently verifying if the certificate expires within the chain, as indicated in this section of the code - https://github.com/akash-network/helm-charts/blob/provider-4.3.7/charts/akash-provider/scripts/init.sh#L116.

However, there is a potential issue where a worker node may cache an already expired certificate. The expired certificate would be stored at ~root/.akash/k8s-config/provider.pem on the worker node. This becomes especially problematic when there are multiple worker nodes where the akash-provider pod could be deployed.

Therefore, it's advisable to also check for certificate expiration locally.


The workaround until then would be:

  1. remove the provider cert on all worker nodes:
rm -vf ~root/.akash/k8s-config/provider.pem
  1. bounce the provider pod:
kubectl -n akash-services delete pods -l app=akash-provider
@andy108369
Copy link
Contributor

done in #260

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants