Skip to content

feat(policy): namespace root certificates #2771

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 27 commits into from
Oct 17, 2025
+1,218 −24
Merged

feat(policy): namespace root certificates #2771

Show file tree
Hide file tree
Changes from 7 commits
Commits
Show all changes
27 commits
Select commit Hold shift + click to select a range
926f5ab
Extend authentication exclusions and update namespace policy definiti…
pflynn-virtru Sep 30, 2025
48c4e62
Add X.509 certificate management to namespace policy definitions.
pflynn-virtru Oct 2, 2025
f61ecc0
Introduce namespace-to-certificate RPCs for X.509 certificate managem…
pflynn-virtru Oct 2, 2025
0187c8d
Remove namespace policy routes from public access and associated tests.
pflynn-virtru Oct 2, 2025
a57e637
Introduce X.509 certificate validation and enhance namespace policy f…
pflynn-virtru Oct 2, 2025
f0624f9
Remove unused error messages in namespace certificate assignment test.
pflynn-virtru Oct 2, 2025
9669a30
Add schema and migration for namespace certificate management
pflynn-virtru Oct 2, 2025
7b6f379
Introduce `is_root` flag to certificate schema for root/intermediate …
pflynn-virtru Oct 7, 2025
964a6c3
Add `is_root` flag to certificate schema for root/intermediate distin…
pflynn-virtru Oct 7, 2025
319f68b
Update all namespace-certificate management methods to use pointer-ba…
pflynn-virtru Oct 7, 2025
d1dca55
Change certificate field format from `x5c` to `pem` across schema, RP…
pflynn-virtru Oct 9, 2025
c5b2680
Merge remote-tracking branch 'origin/main' into feature/trust-by-name…
pflynn-virtru Oct 9, 2025
f7ed290
Remove deprecated `AttributeValueSelector` schema and update namespac…
pflynn-virtru Oct 9, 2025
8311e79
Update SQL queries to return specific fields instead of all columns i…
pflynn-virtru Oct 9, 2025
b2f88fa
Add trigger for `certificates.updated_at` and handle trigger removal …
pflynn-virtru Oct 9, 2025
b4868b7
Add `metadata` field to certificate schema across protobuf, OpenAPI s…
pflynn-virtru Oct 10, 2025
f5d8101
Apply suggestion from Jake
pflynn-virtru Oct 10, 2025
6454b1b
Update error logging in `namespaces.go` to use `slog.Any` for improve…
pflynn-virtru Oct 10, 2025
c9fdcea
Refactor error handling in `namespaces.go` to use `errors.Join` for e…
pflynn-virtru Oct 10, 2025
2695891
Remove `is_root` flag from certificate schema, update related SQL que…
pflynn-virtru Oct 10, 2025
80e7d39
Add validation for root certificates, improve namespace ID resolution…
pflynn-virtru Oct 10, 2025
82ba7b1
Refactor `CreateCertificate` to return full certificate object, updat…
pflynn-virtru Oct 14, 2025
0f478fb
Merge remote-tracking branch 'origin/main' into feature/trust-by-name…
pflynn-virtru Oct 15, 2025
b3e7bc3
Refactor error handling in `namespaces.go` and `errors.go` to add `Er…
pflynn-virtru Oct 15, 2025
a3a1b5a
Update test to expect `ErrFqnMismatch` instead of `ErrNotFound` for i…
pflynn-virtru Oct 15, 2025
5fad1f5
Refactor `UnsafeDeleteNamespace` to replace generic errors with struc…
pflynn-virtru Oct 15, 2025
3f0b299
Add certificate validation and signature checks; enhance root certifi…
pflynn-virtru Oct 17, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
226 changes: 226 additions & 0 deletions docs/grpc/index.html
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

19 changes: 19 additions & 0 deletions docs/openapi/policy/actions/actions.openapi.yaml
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

19 changes: 19 additions & 0 deletions docs/openapi/policy/attributes/attributes.openapi.yaml
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

Loading
Loading