openstack
/
openstack
Code Issues Proposed changes

Update git submodules 

* Update charm-vault from branch 'master'
  to 15ab73ea723d158f9105f0d603515e5d3ddaa78c
  - Merge "Implement cert cache for vault units (v3)"
  - Implement cert cache for vault units (v3)
    
    This cache is used to store certificates and keys
    issued by the leader unit. Non-leader units read
    these certificates and keep data in their
    "tls-certificates" relations up to date.
    This ensures that charm units that receive certs
    from vault can read from relation data of any
    vault unit and receive correct data.
    
    This patch is mostly the same as
    f55055b8783ca6f3f569209b4f82285377f5ac64
    but improved to avoid LP#1983269 by breaking
    down the cert cache into separate key-value pairs
    for each remote unit and avoiding a race-condition
    caused by get-csr action. Instead of using
    leader-settings, this patch is now using
    application data bag provided by a new vault-ha
    relation implementation.
    
    Co-Authored-By: Rodrigo Barbieri <rodrigo.barbieri@canonical.com>
    
    Change-Id: I18aa6c9193379ea454851b6f60a8f331ef88a980
    Closes-Bug: #1940549
    Closes-Bug: #1983269
    Closes-Bug: #1845961
This commit is contained in:
Zuul 2023-01-23 11:13:22 +00:00 committed by Gerrit Code Review
parent c3976a086d
commit eabc0e0a05
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
charm-vault

@ -1 +1 @@
Subproject commit 1ea06f681989df6b2fa8a9193ffffaa2bf449d9e
Subproject commit 15ab73ea723d158f9105f0d603515e5d3ddaa78c