Skip to content

Conversation

@ianton-ru
Copy link

No description provided.

@ianton-ru ianton-ru requested review from a team September 17, 2024 17:21
@ianton-ru ianton-ru changed the title CHINA-495: Add custom TLS certificate for clickhouse WIP: CHINA-495: Add custom TLS certificate for clickhouse Sep 17, 2024
@Acuion
Copy link
Contributor

Acuion commented Sep 17, 2024

jfyi, you can create draft PRs that won't call reviewers immediately
image

@ianton-ru ianton-ru marked this pull request as draft September 19, 2024 09:17
@ianton-ru ianton-ru force-pushed the CHINA-495 branch 9 times, most recently from e93f9fe to 54aaeef Compare September 20, 2024 12:56
@ianton-ru ianton-ru marked this pull request as ready for review September 20, 2024 15:50
@ianton-ru ianton-ru changed the title WIP: CHINA-495: Add custom TLS certificate for clickhouse CHINA-495: Add custom TLS certificate for clickhouse Sep 20, 2024
}

certificate := types.StringValue(certRaw)
s, err := strconv.Unquote(oldKey)
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I suppose we need to be able to support multiple formats here, or describe which format of keys we support.

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Most of users will use file [1] function to forward keys, it's gonna be unquoted for most of cases.

[1] https://developer.hashicorp.com/terraform/language/functions/file

Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Works as with

key = file("server.key")

as well as with

key = <<EOT
-----BEGIN CERTIFICATE-----
....
-----END CERTIFICATE-----
EOT

Read-Only:

- `certificate` (String) Public certificate
- `key` (String) Private certificate key
Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Remove 'key' from datasource

Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Without key can't check changes in private part
For example if customer used at first time wrong private part, changing in private part is not detected withoput changing in public part (certificate).

@ianton-ru ianton-ru force-pushed the CHINA-495 branch 3 times, most recently from 4cc0725 to 248de08 Compare September 26, 2024 07:44
@ianton-ru ianton-ru force-pushed the CHINA-495 branch 2 times, most recently from 501cc61 to c0f612c Compare September 27, 2024 15:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants