]> git.apps.os.sepia.ceph.com Git - ceph.git/commit
mgr/cephadm: introducing new cmd to generate self-signed certs
authorRedouane Kachach <rkachach@ibm.com>
Wed, 3 Jul 2024 08:15:20 +0000 (10:15 +0200)
committerRedouane Kachach <rkachach@ibm.com>
Wed, 31 Jul 2024 06:47:17 +0000 (08:47 +0200)
commit0596664c40288fa153735f30257ec4b0655921f2
tree5342a37ad4034a174d45263ccec00316eb98f036
parent25a4f2adada589f83c933009ae3c9f3d5264e804
mgr/cephadm: introducing new cmd to generate self-signed certs

this new Cephadm cmd introduces the ability to generate self-signed
certificates for external modules, signed by Cephadm as the root CA.
This feature is essential for implementing mTLS. Previously, if the
user did not provide a certificate and key, the dashboard would
generate its own. With this update, the dashboard now calls Cephadm
to generate self-signed certificates, enabling secure mTLS
communication with other backend applications. Prometheus module
also makes use of this new functionality to generate self-signed
certificates.

Signed-off-by: Redouane Kachach <rkachach@ibm.com>
src/cephadm/cephadm.py
src/cephadm/tests/test_cephadm.py
src/pybind/mgr/cephadm/module.py
src/pybind/mgr/dashboard/controllers/prometheus.py
src/pybind/mgr/dashboard/tests/test_prometheus.py
src/pybind/mgr/orchestrator/_interface.py
src/pybind/mgr/orchestrator/module.py
src/pybind/mgr/prometheus/module.py