[ICN-411] Implement dcm certificate approval Created: 28/Jul/20  Updated: 17/Dec/20  Resolved: 26/Aug/20

Status: Done
Project: Integrated Cloud Native NFV
Component/s: None
Affects Version/s: None
Fix Version/s: None

Type: Story Priority: Medium
Reporter: Igor Duarte Cardoso Assignee: Igor Duarte Cardoso
Resolution: Done Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Epic Link: DCM dev works
Sprint: ICN Sprint 23, ICN Sprint 24
Story Points: 2

 Comments   
Comment by Igor Duarte Cardoso [ 26/Aug/20 ]

Unblocking and closing since when it comes to DCM, certificate approval is implemented.

Comment by Igor Duarte Cardoso [ 12/Aug/20 ]

Set to blocked by ICN-422.

Comment by Igor Duarte Cardoso [ 07/Aug/20 ]

Unblocking this story as I support Ritu on the implementation of rsync-side certificate approval (ICN-422) - more specifically, obtaining the CA-signed user cert from the k8s API.

Comment by Igor Duarte Cardoso [ 04/Aug/20 ]

New story ICN-422 is tracking the rsync gap.

Comment by Igor Duarte Cardoso [ 04/Aug/20 ]

Neither rsync, nor the library it uses for accessing k8s (klient) support updating subresources (needed for certificate approval - resource=csr; subresource=approval or status). Extensive changes and further investigation is expected to get the certificate approval to work. These new changes will be done outside of DCM, where the bulk of the work will be. In terms of DCM itself, part of the changes have already been done: the part where a certificate approval request is sent from DCM to rsync. The other part that will have to be done is making rsync return the signed csr back to DCM and having DCM save that in the DB and generate the kubeconfig (this last piece already has its story, ICN-418).

 

I'll thus create a separate story to address rsync/klient's gaps in order to unblock DCM work.

Comment by Igor Duarte Cardoso [ 03/Aug/20 ]

Turning placeholder into story to implement certificate approval workflow, either perhaps via k8s API or by making changes directly in rsync to support this. Setting SP=2.

Generated at Sat Feb 10 05:59:43 UTC 2024 using Jira 9.4.5#940005-sha1:e3094934eac4fd8653cf39da58f39364fb9cc7c1.