Block publish_global_client_cert handler in config-change hook
upload-sign-csr action fails if the TTL is shorter than the default
value of default-ttl. Further change in the default-ttl value via
juju config command (to set proper default-ttl) results in the unit
to go to error state.
The flag certificates.reissue.global.requested which is set during the
upload-sign-csr action resulted in matching publish_global_client_cert
handler for any config changes. Since the invocation of handlers is
random in reactive framework, the unit goes to error state whenever the
publish_global_client_cert handler is invoked before the handler
tune_pki_backend_config_changed.
This patch blocks the execution of publish_global_client_cert handler
during any configuration change.
Change-Id: I60f0e1aad13380a4449e5d4b56840954cc7e81a9
Closes-Bug: #1885576
(cherry picked from commit a38bf7cbd265ab46357ea7f9e99f55d126da8fb2)