implement certificate_transfer requirer

canonical / grafana-agent-k8s-operator

https://charmhub.io/grafana-agent-k8s

Apache License 2.0

8 stars 18 forks source link

implement certificate_transfer requirer #225

Closed lucabello closed 1 year ago

lucabello commented 1 year ago

Issue

grafana-agent needs to be able to get and trust traefik's certificate.

Solution

~Use the mutual_tls interface, which (besides what the - wrong - name suggests) helps transfer the Provider's certificate over relation data to the Requirers.~

The interface has now been renamed to certificate-transfer

Possible TODOs

[ ] Ideally add an integration test with a Provider and test it

PietroPasotti commented 1 year ago

@lucabello what's the status on this work? The CI seems seriously stuck

lucabello commented 1 year ago

This PR is dependent on and blocked by:

https://github.com/canonical/certificate-transfer-interface/issues/5
https://github.com/canonical/certificate-transfer-interface/issues/6

Otherwise, we can't save the certificate to file as we wouldn't know which relation the certificate comes from.