4 ms·
> certs won't get renewed because institutional knowledge has left the door. The parallel reality where you need to be a veteran SRE with an MIT degree to oper
by intelVISA 4y ago
> certs won't get renewed because institutional knowledge has left the door.
The parallel reality where you need to be a veteran SRE with an MIT degree to operate the arcane tool 'certbot'.
- threeseed 4y agoThey aren't talking about the front-end certificates which expire in Feb 2023. It's likely the ones to encrypt all of the traffic involving the Finagle micro-services, data sources, observability systems etc. And I suspect the issue there is that you are going to need to do a rolling restart. Which I personally would not want to be doing if 90% of the company is no longer there.
- vonmoltke 4y agoThe way TLS was integrated into Finagle, most services should not need to be restarted to pick up and use their new certs. That said, there are certain core services that will require manual intervention, and there will inevitably be some services that should auto-update but do not.