Skip to content

feat: Use proper subject DNs in plugins.security.nodes_dn#144

Merged
siegfriedweber merged 14 commits into
mainfrom
feat/improve-nodes-dn
Jul 7, 2026
Merged

feat: Use proper subject DNs in plugins.security.nodes_dn#144
siegfriedweber merged 14 commits into
mainfrom
feat/improve-nodes-dn

Conversation

@siegfriedweber

@siegfriedweber siegfriedweber commented May 27, 2026

Copy link
Copy Markdown
Member

Description

Replace the generic subject DN in the configuration setting plugins.security.nodes_dn with the FQDNs of the OpenSearch nodes.

Part of stackabletech/secret-operator#617

Definition of Done Checklist

  • Not all of these items are applicable to all PRs, the author should update this template to only leave the boxes in that are relevant
  • Please make sure all these things are done and tick the boxes

Author

Reviewer

  • Code contains useful comments
  • Code contains useful logging statements
  • (Integration-)Test cases added
  • Documentation added or updated. Follows the style guide.
  • Changelog updated
  • Cargo.toml only contains references to git tags (not specific commits or branches)

Acceptance

  • Feature Tracker has been updated
  • Proper release label has been added
  • Links to generated (nightly) docs added
  • Release note snippet added
  • Add type/deprecation label & add to the deprecation schedule
  • Add type/experimental label & add to the experimental features tracker

Comment thread tests/release.yaml
Comment thread Cargo.toml
@siegfriedweber siegfriedweber marked this pull request as ready for review June 23, 2026 10:24
@siegfriedweber siegfriedweber requested a review from a team July 6, 2026 15:22
@siegfriedweber siegfriedweber moved this to Development: Waiting for Review in Stackable Engineering Jul 6, 2026
Comment thread tests/templates/kuttl/smoke/10-assert.yaml.j2

@NickLarsenNZ NickLarsenNZ left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@NickLarsenNZ NickLarsenNZ moved this from Development: Waiting for Review to Development: In Review in Stackable Engineering Jul 7, 2026
@siegfriedweber siegfriedweber added this pull request to the merge queue Jul 7, 2026
@siegfriedweber siegfriedweber added the release-note Denotes a PR that will be considered when it comes time to generate release notes. label Jul 7, 2026
@siegfriedweber siegfriedweber moved this from Development: In Review to Development: Done in Stackable Engineering Jul 7, 2026
Merged via the queue into main with commit ba7a8ba Jul 7, 2026
18 checks passed
@siegfriedweber siegfriedweber deleted the feat/improve-nodes-dn branch July 7, 2026 08:15
@siegfriedweber

Copy link
Copy Markdown
Member Author

Release notes

Platform improvements

OpenSearch

The verification of the OpenSearch nodes' certificates has been extended. The nodes' certificates now also include the FQDNs of the nodes, which are verified by the other nodes using the plugins.security.nodes_dn configuration setting. Previously, it was only verified that the certificates were issued by the Secret Operator.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

release/26.7.0 release-note Denotes a PR that will be considered when it comes time to generate release notes.

Projects

Status: Development: Done

Development

Successfully merging this pull request may close these issues.

2 participants