[ICN-411] Implement dcm certificate approval Created: 28/Jul/20 Updated: 17/Dec/20 Resolved: 26/Aug/20 |
|
| Status: | Done |
| Project: | Integrated Cloud Native NFV |
| Component/s: | None |
| Affects Version/s: | None |
| Fix Version/s: | None |
| Type: | Story | Priority: | Medium |
| Reporter: | Igor Duarte Cardoso | Assignee: | Igor Duarte Cardoso |
| Resolution: | Done | Votes: | 0 |
| Labels: | None | ||
| Remaining Estimate: | Not Specified | ||
| Time Spent: | Not Specified | ||
| Original Estimate: | Not Specified | ||
| Epic Link: | DCM dev works |
| Sprint: | ICN Sprint 23, ICN Sprint 24 |
| Story Points: | 2 |
| Comments |
| Comment by Igor Duarte Cardoso [ 26/Aug/20 ] |
|
Unblocking and closing since when it comes to DCM, certificate approval is implemented. |
| Comment by Igor Duarte Cardoso [ 12/Aug/20 ] |
|
Set to blocked by |
| Comment by Igor Duarte Cardoso [ 07/Aug/20 ] |
|
Unblocking this story as I support Ritu on the implementation of rsync-side certificate approval ( |
| Comment by Igor Duarte Cardoso [ 04/Aug/20 ] |
|
New story |
| Comment by Igor Duarte Cardoso [ 04/Aug/20 ] |
|
Neither rsync, nor the library it uses for accessing k8s (klient) support updating subresources (needed for certificate approval - resource=csr; subresource=approval or status). Extensive changes and further investigation is expected to get the certificate approval to work. These new changes will be done outside of DCM, where the bulk of the work will be. In terms of DCM itself, part of the changes have already been done: the part where a certificate approval request is sent from DCM to rsync. The other part that will have to be done is making rsync return the signed csr back to DCM and having DCM save that in the DB and generate the kubeconfig (this last piece already has its story,
I'll thus create a separate story to address rsync/klient's gaps in order to unblock DCM work. |
| Comment by Igor Duarte Cardoso [ 03/Aug/20 ] |
|
Turning placeholder into story to implement certificate approval workflow, either perhaps via k8s API or by making changes directly in rsync to support this. Setting SP=2. |