ChenSammi commented on PR #3982: URL: https://github.com/apache/ozone/pull/3982#issuecomment-1333280090
Changes, 1. change constructor of DefaultCertificateClient from using SecurityConfig to OzoneConfiguration. 2. OM and DN generate certificate process refactor. Add signAndStoreCertificate and getCSRBuilder function in DNCertificateClient and OMCertificateClient by leveraging the current corresponding code in OzoneManager and HddsDatanodeService. So the code will be used in both first time cert generation and later cert rotation. 3. move OMCertificateClient from hdds-server-framework to ozone-manager module so that OMCertificateClient can use classed in this module. 4. add the certificate monitor task in OzoneManager and HddsDatanodeService. re-generate om/dn key and do the cert rotation. 5. add unit test for cert rotation. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
