Skip to content

Add certmanager service, configurable ssl certificate reload threshold and interval - #83

Draft
jshufro wants to merge 10 commits into
attestantio:masterfrom
jshufro:jms/certs
Draft

Add certmanager service, configurable ssl certificate reload threshold and interval#83
jshufro wants to merge 10 commits into
attestantio:masterfrom
jshufro:jms/certs

Conversation

@jshufro

@jshufro jshufro commented Oct 6, 2025

Copy link
Copy Markdown
Contributor

No description provided.

Comment thread services/certmanager/standard/service.go Outdated
Comment thread services/certmanager/standard/service.go Outdated
Comment thread services/certmanager/standard/service.go Outdated
Comment thread services/certmanager/standard/service.go Outdated
Comment thread services/certmanager/service.go Outdated
Comment thread services/certmanager/standard/service.go Outdated
Comment thread services/certmanager/standard/parameters.go Outdated
Comment thread services/certmanager/service.go Outdated
jshufro and others added 8 commits October 26, 2025 12:06
Co-authored-by: Chris Berry <bez625@gmail.com>
Co-authored-by: Chris Berry <bez625@gmail.com>
Co-authored-by: Chris Berry <bez625@gmail.com>
Co-authored-by: Chris Berry <bez625@gmail.com>
Co-authored-by: Chris Berry <bez625@gmail.com>
Co-authored-by: Chris Berry <bez625@gmail.com>
Co-authored-by: Chris Berry <bez625@gmail.com>
Co-authored-by: Chris Berry <bez625@gmail.com>
@jshufro jshufro mentioned this pull request Oct 26, 2025
certKeyURI string

lastReloadAttemptTime time.Time
currentCertMutext sync.RWMutex

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is the final 't' a typo in currentCertMutext?

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yep, that's a typo

Comment thread main.go
if err != nil {
return nil, nil, nil, errors.Wrap(err, fmt.Sprintf("failed to obtain server certificate from %s", viper.GetString("certificates.server-cert")))
if viper.GetString("certificates.ca-cert") == "" {
return nil, nil

@AntiD2ta AntiD2ta Dec 2, 2025

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Shouldn't we return error here?

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

custom CAs are optional, I believe

@jshufro
jshufro marked this pull request as draft January 23, 2026 23:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants