update tls error

[jinyingsunny]

after I create some new secret in ns nebula-sc :

kubectl create secret tls ca-s01 --key=mtls/0810_IPSAN/root.key --cert=mtls/0810_IPSAN/root.crt -n nebula-sc 
kubectl create secret tls client-s01 --key=mtls/0810_IPSAN/client.key --cert=mtls/0810_IPSAN/client.crt -n nebula-sc
kubectl create secret tls server-s01 --key=mtls/0810_IPSAN/server.key --cert=mtls/0810_IPSAN/server.crt -n nebula-sc

then i edit nebula-cluster by kubectl -n nebula-sc edit nc nebula :

• modify clientSecret 's value from client-s to client-s01 ;
• modify serverSecret 's value from server-s to server-s01;
• modify caSecret 's value from ca-s to ca-s01

then it same cert is not change successful, since nebula-go report error

the operator-log , error as follow :

E0810 08:41:04.506823       1 nebula_cluster_control.go:95] reconcile metad cluster failed: remote error: tls: error decrypting message
E0810 08:41:04.506901       1 nebula_cluster_controller.go:182] NebulaCluster [nebula-sc/nebula] reconcile failed: remote error: tls: error decrypting message
I0810 08:41:04.506918       1 nebula_cluster_controller.go:141] Finished reconciling NebulaCluster [nebula-sc/nebula] (47.791006ms), result: {false 5s}

however , when i delete nc: kubectl -n nebula-sc delete nc nebula ;
vim nebula-ent-sc2.yaml change value of clientSecret,serverSecret,caSecret
and apply -f nebula-sc.yaml

the new cluster start successfully and works well.

Your Environments (required)

nebula-ent-sc-rc镜像是：reg.vesoft-inc.com/rc/nebula-storaged-ent:v3.5.0-sc
operator镜像是：reg.vesoft-inc.com/cloud-dev/nebula-operator:snap-1.4
agent镜像是：image: reg.vesoft-inc.com/cloud-dev/nebula-agent:v3.5.1-sc

Expected behavior
replace normal

[jinyingsunny]

when i update secret in nebula-ent-sc2.yaml as front👆🏻, operator also report the same error.

[jinyingsunny]

cert mount implementation model changed，so close id.