Certificate revocation affecting access to some Astro deployments
Nov 12, 14:18 UTCNov 12, 18:11 UTC
Duration
3h 53m
Impact
Critical
Root cause
Not disclosed
Astronomer, 90 days
17 incidents
Affected
Not listed by the vendor.
Final update
This incident is resolved, and service has returned to normal. All revoked certificates have been renewed, and we’ve confirmed that no additional certificates will be revoked in connection with this incident.
Timeline
- Resolved · Nov 12, 18:11 UTC
This incident is resolved, and service has returned to normal. All revoked certificates have been renewed, and we’ve confirmed that no additional certificates will be revoked in connection with this incident.
- Monitoring · Nov 12, 16:08 UTC
We have successfully revoked and reissued all affected certificates revoked by Google Trust Services, and functionality has returned to normal. We are continuing to monitor the situation.
- Investigating · Nov 12, 14:18 UTC
``` A certificate authority incident has caused Google Trust Services to revoke a number of TLS certificates for astronomer.run, which Astro deployments use for HTTPS access. Users whose browsers or network gateways enforce certificate revocation checks may be unable to access the Airflow UI or other HTTPS endpoints of affected deployments. Our engineering team has identified the affected certificates and is replacing them to restore access. We will provide an update as certificates are reissued. ```
More from Astronomer
Full historySecurity Advisory: Linux kernel IPv4 TCP vulnerability (CVE-2026-98432)lasted 1mPHP Security Advisory: Astro and Astro Private Cloud Not Affected; Review Custom Imageslasted 15d 19hSecurity Update: Runtime Releases and Guidance for the eMudhra/emSign Certificate Issuelasted 45h 27mDelayed delivery of Astro Alertslasted 26h 9mOrganization Dashboards are failing to load with Invalid kid parameter errorlasted 1h 23mAstro UI and API are appearing offline for some userslasted 1h 51m