Skip to content

DAOS-18783 pool: add pool_ca and cert_watermarks byteval properties#18403

Draft
mjmac wants to merge 1 commit into
masterfrom
mjmac/DAOS-18783-pr1-prop
Draft

DAOS-18783 pool: add pool_ca and cert_watermarks byteval properties#18403
mjmac wants to merge 1 commit into
masterfrom
mjmac/DAOS-18783-pr1-prop

Conversation

@mjmac

@mjmac mjmac commented Jun 2, 2026

Copy link
Copy Markdown
Contributor

Reserve property storage on the pool for the per-pool CA bundle
and the per-CN revocation watermarks. The byteval length cap
bounds decode-time allocation.

Signed-off-by: Michael MacDonald github@macdonald.cx

@mjmac mjmac requested a review from kjacque June 2, 2026 15:25
@daosbuild3

Copy link
Copy Markdown
Collaborator

@github-actions

github-actions Bot commented Jun 2, 2026

Copy link
Copy Markdown

Ticket title is 'Enable certificate-based client authentication'
Status is 'Open'
https://daosio.atlassian.net/browse/DAOS-18783

@daosbuild3

Copy link
Copy Markdown
Collaborator

@mjmac mjmac force-pushed the mjmac/DAOS-18783-pr1-prop branch from dc2a820 to 1417bdd Compare June 4, 2026 14:46
@daosbuild3

Copy link
Copy Markdown
Collaborator

Flesh out support for byteval pool properties, and add new properties
for per-pool CA bundle and CN revocation watermarks. Manually tested
for upgrade/downgrade support without requiring a pool version bump
or explicit pool upgrade. Older servers ignore the unknown properties,
and newer servers gracefully handle unset optional properties.

Patch: 1/5
Features: pool
Signed-off-by: Michael MacDonald <github@macdonald.cx>
@mjmac mjmac force-pushed the mjmac/DAOS-18783-pr1-prop branch from 1417bdd to dd791f1 Compare July 4, 2026 14:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

2 participants