Skip to content

Add certmanager service, configurable ssl certificate reload threshold and interval#83

Draft
jshufro wants to merge 10 commits intoattestantio:masterfrom
jshufro:jms/certs
Draft

Add certmanager service, configurable ssl certificate reload threshold and interval#83
jshufro wants to merge 10 commits intoattestantio:masterfrom
jshufro:jms/certs

Conversation

@jshufro
Copy link
Copy Markdown
Contributor

@jshufro jshufro commented Oct 6, 2025

No description provided.

Comment thread services/certmanager/standard/service.go Outdated
Comment thread services/certmanager/standard/service.go Outdated
Comment thread services/certmanager/standard/service.go Outdated
Comment thread services/certmanager/standard/service.go Outdated
Comment thread services/certmanager/service.go Outdated
Comment thread services/certmanager/standard/service.go Outdated
Comment thread services/certmanager/standard/parameters.go Outdated
Comment thread services/certmanager/service.go Outdated
jshufro and others added 8 commits October 26, 2025 12:06
Co-authored-by: Chris Berry <bez625@gmail.com>
Co-authored-by: Chris Berry <bez625@gmail.com>
Co-authored-by: Chris Berry <bez625@gmail.com>
Co-authored-by: Chris Berry <bez625@gmail.com>
Co-authored-by: Chris Berry <bez625@gmail.com>
Co-authored-by: Chris Berry <bez625@gmail.com>
Co-authored-by: Chris Berry <bez625@gmail.com>
Co-authored-by: Chris Berry <bez625@gmail.com>
@jshufro jshufro mentioned this pull request Oct 26, 2025
certKeyURI string

lastReloadAttemptTime time.Time
currentCertMutext sync.RWMutex
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is the final 't' a typo in currentCertMutext?

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yep, that's a typo

Comment thread main.go
if err != nil {
return nil, nil, nil, errors.Wrap(err, fmt.Sprintf("failed to obtain server certificate from %s", viper.GetString("certificates.server-cert")))
if viper.GetString("certificates.ca-cert") == "" {
return nil, nil
Copy link
Copy Markdown
Contributor

@AntiD2ta AntiD2ta Dec 2, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Shouldn't we return error here?

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

custom CAs are optional, I believe

@jshufro jshufro marked this pull request as draft January 23, 2026 23:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants