search

skupperproject / skupper

Skupper is an implementation of a Virtual Application Network, enabling rich hybrid cloud communication.
http://skupper.io
Apache License 2.0
595 stars 74 forks source link

Nonkube certs paths refactored #1781

Closed fgiorgetti closed 3 days ago

fgiorgetti commented 1 week ago

This PR simplifies the directory trees used to store runtime certificates and by user provided certificates. Certificate Authorities (issuers) are now stored under:

${HOME}/.local/share/skupper/namespaces/default/runtime/issuers/ ${HOME}/.local/share/skupper/namespaces/default/input/issuers/

While client and server certificates are stored under (no more client/ or server/ directory needed):

${HOME}/.local/share/skupper/namespaces/default/runtime/certs/ ${HOME}/.local/share/skupper/namespaces/default/input/certs/

They need to be kept separate, as in case the namespace resources need to be reloaded, the CAs (issuers) can be preserved, while the runtime/certs can be re-generated (or copied from input/certs).

It will also simplify the integration with #1761 .