Bug ID 1084817: Container api-svc-gateway crashes due to certificate issues partition database

Last Modified: May 29, 2024

Affected Product(s):
F5OS Velos(all modules)

Fixed In:
F5OS-C 1.5.0, F5OS-A 1.3.0, F5OS-A 1.1.0

Opened: Mar 02, 2022

Severity: 3-Major

Symptoms

The api-svc-gateway container crashes when a bad self-signed certificate or key is published to partition database.

Impact

The api-svc-gateway service crashes.

Conditions

A corrupted certificate/key causes the issue.

Workaround

Run the following command: (config) # system database reset-to-default proceed

Fix Information

In the scenario this happens, api-svc-gateway now: * detects when it cannot set up an SSL connection using these credentials * logs an error * sets health status to unhealthy with appropriate error and severity * tries to start a GRPC server with only insecure credentials

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips