Uploaded image for project: 'Apache Ozone'
  1. Apache Ozone
  2. HDDS-7331 Ozone PKI improvements
  3. HDDS-9044

[ozone-cert-rotation] Invalid exit code from ozone cert clean command

    XMLWordPrintableJSON

Details

    • Sub-task
    • Status: Resolved
    • Critical
    • Resolution: Resolved
    • 1.4.0
    • None
    • Ozone Manager

    Description

      Ozone cert clean cli usage is not user friendly.
      Below are the reasons :

      • Runs without kerberos authentication check
        [root@quasar-ewnsjs-2 ~]# klist
        klist: No credentials cache found (filename: /tmp/krb5cc_0)
        [root@quasar-ewnsjs-2 ~]# /opt/cloudera/parcels/CDH/bin/ozone admin cert clean --db=/var/lib/hadoop-ozone/scm/data789712
        [root@quasar-ewnsjs-2 ~]#
        
      • It ask for db-path which can be identified with the help of ozone.scm.db.dirs config.
      • Command needs to be run from scm node and it cannot be run from a client node
      • There is no response on passing invalid path with invalid exit code.
        root@st-ozone-0mrob1-k26w9:/hwqe/hadoopqe# /opt/cloudera/parcels/CDH/bin/ozone admin cert clean --db=/tmp
        root@st-ozone-0mrob1-k26w9:/hwqe/hadoopqe# echo $?
        0
        

      Attachments

        Issue Links

          Activity

            People

              sgal Szabolcs Gál
              ssulav Soumitra Sulav
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: