The autosign checker does not close its file descriptor
Over a period of time lsof shows that the autosign.conf file is being opened repeatedly but not closed.
I am working with a very old code base but the fault is still there in development.
#2 Updated by Dmitri Dolguikh about 2 years ago
This looks like the culprit: https://github.com/theforeman/smart-proxy/blob/develop/modules/puppetca/puppetca_main.rb#L25. But there are a couple more places where file descriptors will be leaked should an error occur.