Skip to content

Feature/v4 tls changes#299

Closed
Amunagala-itential wants to merge 3 commits intoitential:feature/v4from
Amunagala-itential:feature/v4-tls-changes
Closed

Feature/v4 tls changes#299
Amunagala-itential wants to merge 3 commits intoitential:feature/v4from
Amunagala-itential:feature/v4-tls-changes

Conversation

@Amunagala-itential
Copy link
Contributor

PKI Standardization and Hostname-Based Certificate Support

Summary

Standardized PKI implementation across MongoDB, Redis, Platform, and Gateway roles with hostname-based certificate naming to support multi-server deployments with unique certificates per host.

Problem

  • Hardcoded certificate names (server.pem, redis.crt) prevented multi-server deployments
  • Inconsistent PKI paths across roles (/etc/ssl/, /opt/itential/)
  • No flexible certificate strategy support (per-host, per-role, wildcard)

Solution

  • Hostname-based certificate naming using {{ inventory_hostname }}
  • Standardized PKI directory structure (/etc/pki/*)
  • Comprehensive PKI variables for all roles
  • Certificate preparation automation script
  • Support for 3 deployment scenarios via configuration

@Amunagala-itential
Copy link
Contributor Author

Merge had conflicts and created an issue with PR. Closing to create a new one

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

Comments