Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

CHINA-495: Add custom TLS certificate for clickhouse #109

Open
wants to merge 4 commits into
base: main
Choose a base branch
from

Conversation

ianton-ru
Copy link

No description provided.

@ianton-ru ianton-ru requested review from a team as code owners September 17, 2024 17:21
@ianton-ru ianton-ru changed the title CHINA-495: Add custom TLS certificate for clickhouse WIP: CHINA-495: Add custom TLS certificate for clickhouse Sep 17, 2024
@Acuion
Copy link
Contributor

Acuion commented Sep 17, 2024

jfyi, you can create draft PRs that won't call reviewers immediately
image

@ianton-ru ianton-ru marked this pull request as draft September 19, 2024 09:17
@ianton-ru ianton-ru force-pushed the CHINA-495 branch 9 times, most recently from e93f9fe to 54aaeef Compare September 20, 2024 12:56
@ianton-ru ianton-ru marked this pull request as ready for review September 20, 2024 15:50
@ianton-ru ianton-ru changed the title WIP: CHINA-495: Add custom TLS certificate for clickhouse CHINA-495: Add custom TLS certificate for clickhouse Sep 20, 2024
internal/provider/clickhouse_cluster_resource.go Outdated Show resolved Hide resolved
internal/provider/clickhouse_cluster_resource_test.go Outdated Show resolved Hide resolved
}

certificate := types.StringValue(certRaw)
s, err := strconv.Unquote(oldKey)
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I suppose we need to be able to support multiple formats here, or describe which format of keys we support.

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Most of users will use file [1] function to forward keys, it's gonna be unquoted for most of cases.

[1] https://developer.hashicorp.com/terraform/language/functions/file

Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Works as with

key = file("server.key")

as well as with

key = <<EOT
-----BEGIN CERTIFICATE-----
....
-----END CERTIFICATE-----
EOT

Read-Only:

- `certificate` (String) Public certificate
- `key` (String) Private certificate key
Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Remove 'key' from datasource

Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Without key can't check changes in private part
For example if customer used at first time wrong private part, changing in private part is not detected withoput changing in public part (certificate).

internal/provider/clickhouse_cluster_resource_test.go Outdated Show resolved Hide resolved
@ianton-ru ianton-ru force-pushed the CHINA-495 branch 3 times, most recently from 4cc0725 to 248de08 Compare September 26, 2024 07:44
@ianton-ru ianton-ru force-pushed the CHINA-495 branch 2 times, most recently from 501cc61 to c0f612c Compare September 27, 2024 15:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants