Drop support for `CN=generated certificate for pod` subject DNs

Open Beginner friendly
#145 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Assessment

Difficulty
2/5
Estimated time
1-3 hours
Newbie friendliness
65/100
Issue type
Refactor
Clarity
Mostly clear
Activity status
Quiet
Tech stack
rust
Domain
search

Research direction

Locate the code or templates that populate the plugins.security.nodes_dn setting and trace where the legacy subject DN CN=generated certificate for pod is retained. Remove that legacy entry while preserving the FQDN-based node DNs, then run the relevant operator checks to confirm the generated configuration no longer supports the old subject DN.

Written by the indexing model from the issue text.

Description

Since #144, the setting plugins.security.nodes_dn is configured with subject DNs containing the FQDNs of the OpenSearch nodes. The former subject DN CN=generated certificate for pod was not removed, because a transition (from SDP 26.3 to 26.7) would not be possible. After the release of SDP 26.7, support for the old subject DN can be removed.

Dominant language
Rust
Stars
0
Forks
2
Avg merge
11h 1m
Merged PRs (30d)
9

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

More from stackabletech/opensearch-operator

All issues in stackabletech/opensearch-operator

Similar issues

More Rust issues

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.