Akraino JIRA https://jira.akraino.org This file is an XML representation of an issue en-us 9.4.5 940005 11-04-2023 [ICN-411] Implement dcm certificate approval https://jira.akraino.org/browse/ICN-411 Integrated Cloud Native NFV ICN-411 Implement dcm certificate approval Story Medium Done Done Igor Duarte Cardoso Igor Duarte Cardoso Tue, 28 Jul 2020 18:50:04 +0000 Thu, 17 Dec 2020 00:54:29 +0000 Wed, 26 Aug 2020 17:44:31 +0000 0 1 <p>Unblocking and closing since when it comes to DCM, certificate approval is implemented.</p> <p>Set to blocked by <a href="https://jira.akraino.org/browse/ICN-422" title="Initial work on rsync certificate approval" class="issue-link" data-issue-key="ICN-422"><del>ICN-422</del></a>.</p> <p>Unblocking this story as I support Ritu on the implementation of rsync-side certificate approval (<a href="https://jira.akraino.org/browse/ICN-422" title="Initial work on rsync certificate approval" class="issue-link" data-issue-key="ICN-422"><del>ICN-422</del></a>) - more specifically, obtaining the CA-signed user cert from the k8s API.</p> <p>New story <a href="https://jira.akraino.org/browse/ICN-422" title="Initial work on rsync certificate approval" class="issue-link" data-issue-key="ICN-422"><del>ICN-422</del></a> is tracking the rsync gap.</p> <p>Neither rsync, nor the library it uses for accessing k8s (klient) support updating subresources (needed for certificate approval - resource=csr; subresource=approval or status). Extensive changes and further investigation is expected to get the certificate approval to work. These new changes will be done outside of DCM, where the bulk of the work will be. In terms of DCM itself, part of the changes have already been done: the part where a certificate approval request is sent from DCM to rsync. The other part that will have to be done is making rsync return the signed csr back to DCM and having DCM save that in the DB and generate the kubeconfig (this last piece already has its story, <a href="https://jira.akraino.org/browse/ICN-418" title="Generate kubeconfigs for logical cloud" class="issue-link" data-issue-key="ICN-418"><del>ICN-418</del></a>).</p> <p> </p> <p>I'll thus create a separate story to address rsync/klient's gaps in order to unblock DCM work.</p> <p>Turning placeholder into story to implement certificate approval workflow, either perhaps via k8s API or by making changes directly in rsync to support this. Setting SP=2.</p> Development Epic Link ICN-214 Rank 0|i004oc: Sprint ICN Sprint 23 ICN Sprint 24 Story Points 2.0