Skip to content

No way to clear certificate request errors #194

@alexdlukens

Description

@alexdlukens

Bug Description

When we fail to provision a certificate for various reasons, we encounter an error: Skipping certificate request with persistent error

lego-operator/src/charm.py

Lines 186 to 191 in d735ae7

if request_key in persistent_error_requests:
logger.debug(
"Skipping certificate request with persistent error: %s",
certificate_request.certificate_signing_request.raw,
)
continue

After we fix the underlying issue, there is no way for us to tell LEGO to re-attempt requesting certificates. We need e.g. a juju action to clear-certificate-request-errors. Right now we must remove-relation and re-relate the application, requesting ALL certificates again

To Reproduce

N/A

Environment

PS7, lego rev274

Relevant log output

2026-02-05 17:13:14 DEBUG unit.lego-ingress-ps7-snapstore/1.juju-log server.go:405 Skipping certificate request with persistent error: -----BEGIN CERTIFICATE REQUEST-----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-----END CERTIFICATE REQUEST-----
2026-02-05 17:13:14 DEBUG unit.lego-ingress-ps7-snapstore/1.juju-log server.go:405 Skipping certificate request with persistent error: -----BEGIN CERTIFICATE REQUEST-----
MIIC1TCCAb0CAQAwVjElMCMGA1UEAwwcZ3JhZmFuYS51YnVuZXQuY2Fub25pY2Fs
LmNvbTEtMCsGA1UELQwkZWJlYjk4YzMtYjFkOC00MWQxLWI4YjUtMjcwYjY0OTI2
ODVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwXopwg8j+vnY4qa
Jth2oBplGIrBq4z9WZ1b0GOyg+pyDkkVan8HpVcB3arlf0C+PfQGsol8aot5i5aD
gbLZ3bbYLjwf8P4nEG/RVmxzOMCfapvZvVEkDLYE9uWErrleNcAEp8smi9mWPI+y
utW62Klhf0eobWDExsP8jYNpEwwMuyvbuP7DUj3T4OFXvXy7h+xslVV/kUrT+yQ4
9aGEqgrdVAgTj3SeaB09FQ9wczTm/dN/wCcGELgeNUlizLHJ8uxjQAu+erg/VB64
CJEEl8eKsf+LyaPnzbTEUA9q5E79ntgYNbPk7YgYr1UlNMv8SddtHzMYitigmaqM
8lycrwIDAQABoDowOAYJKoZIhvcNAQkOMSswKTAnBgNVHREEIDAeghxncmFmYW5h
LnVidW5ldC5jYW5vbmljYWwuY29tMA0GCSqGSIb3DQEBCwUAA4IBAQBFYN7n2kyS
HHTUvj7G+8we3AQwAXXhFTStb1CZ6D5+ZG9lcnE4JDYnZFyWWu5NyMX4PjfByH5s
LrjfdrZvukKKmo57WusHgYp2udjjDAJDp5h0yt2FwnhZ0XAX5n0URLqGcDyskTb4
mi25758tRdbw2Jtx6coKlOAAIOIk23Q+4jRsT1QwoY0hiJuGB4VcJACRl8t8NtIk
w0FGTmVI/6hzhb82r8PwS3fS6THS1bcdKTYFi8Z9F/AQP+zvtJAxOaSfPcDQfcZa
8HHrjCskWUM7BWupVmSfcvumqK6MCWioAd7/zFUky7Y/dRKF2FGpiKWCWYYHEFQl
k2sI2ipgVt67
-----END CERTIFICATE REQUEST-----
2026-02-05 17:13:14 INFO juju.worker.uniter.operation runhook.go:186 ran "update-status" hook (via hook dispatching script: dispatch)

Additional context

No response

Metadata

Metadata

Labels

bugSomething isn't working

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions