RockteMQ-AI commented on issue #2681: URL: https://github.com/apache/rocketmq-dashboard/issues/2681#issuecomment-5452932639
**Issue Evaluation** Category: `bug` | Status: **Confirmed** **Root Cause:** `K8sCertController` renew endpoint extends validity dates and marks the record valid, but does not replace or parse the stored certificate/key PEM material. The `UpdateCertDTO` also doesn't accept new PEM data. **Impact:** UI shows certificate as "renewed" while the actual credential remains expired — operators may rely on a false sense of security. **Severity:** High — security-related; expired certificates can cause service disruption. The evidence is clear: the renew flow only updates metadata (dates, valid flag) without touching the actual certificate material. This is a genuine bug that needs fixing. The fix should: 1. Accept new PEM certificate/key data in the update request. 2. Parse and validate the new certificate before persisting. 3. Update the stored material atomically with the validity dates. --- *Automated evaluation by RockteMQ-AI* -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
