bug: nvlink manager: cert monitor doesn't trigger rotation if cert is already expired

[tmcroberts97]

Version

2.1

Describe the bug.

The nvlink manager's cert monitor will trigger a cert rotation for a switch if it detects that the TLS cert that it presents will expire in less than the configured time window. If the cert is already expired, the monitor can't form the TLS connection to inspect the cert, and will just log the error without triggering a rotation.

Minimum reproducible example

Relevant log output

Other/Misc.

No response

Code of Conduct

• I agree to follow NVIDIA Infra Controller's Code of Conduct
• I have searched the open bugs and have found no duplicates for this bug report

[AlexGridnev]

@tmcroberts97 this probably should be moved out of 2.1 as still in triage state? cc @joeleggnv @nick-vetro @mxh-0xbb

[tmcroberts97]

@AlexGridnev I already merged the fix, will get it merged to v2.1 branch