You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
@startumltitleRun() SIA v3.2note right
1. Run() runs once a day, if every step is successful
2. If anyone of them fails, it restarts from the beginning
(Specifically defined failures won't restart the process)
end notestart repeatif (idConfig.ProviderService != ""?) then (not empty)
#lightblue:IdentityProvisioning();
(notgiven) elseif (CERT_FILE & KEY_FILEbothgiven?) then (given)
#red:Attemptstoreadinstancecertonlocaldirectory;
else (not given)
:Write a debug"Skipping to request/load x509 certificate";
endifif (Successfully Prepared Instance Cert?) then (no)
if (IS BACKUP_MODE "read" or "read+write" && idConfig.ProviderService != ""?) then (yes)
#lightblue:Attemptstoreadfromk8ssecret;
else (no)
:Write a debug"Skipping to load backup from k8s secret";
endifelse (yes)
endifrepeat while (Successfully prepared instance cert?) is (failed to prepare)
if (Is K8s Backup Secret used?) then (no)
else (yes)
#lightblue:IdentityProvisioning() withFORCE_INIT;
note right
It is just an attempt.
If it fails, it does not restart the flow,
as the instance cert is already prepared.
end note endifnote right
Saves instance certificate into the cert reloader
end note :CertReloader.UpdateCertificate(); :RoleCertProvisioningRequest(); :WriteFile();note right
Color #lightblue: WriteFile() Should WRITE InstanceCert
Color #red: WriteFile() Should NOT write InstanceCert
end notestop@enduml
Background
Before the pr #111, there was not enough check and cert loader panicked.
![image](https://private-user-images.githubusercontent.com/53258958/317628805-1cc2515d-5a3c-4080-bb16-c776c8f6e774.png?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.YptNg1yUz3boayM8dgyYc0OKX29Uqv0eyR-OOI6Vbow)
The changes however has three different uploading part.
It will be great to bring it as one as the following instead:
![image](https://private-user-images.githubusercontent.com/53258958/317927688-3e6c95ed-fec0-42d2-8135-f159ca3ff577.png?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.tXslXauVejAtVNQcBa4vjCR0qqtIgtVJPLa2mL7qDmE)
TODOs
The text was updated successfully, but these errors were encountered: