Skip to content

DAOS-19450 control: enforce per-pool node cert at connect - #18783

Draft
mjmac wants to merge 1 commit into
mjmac/DAOS-18783-pr4-clientpathfrom
mjmac/DAOS-18783-pr5-enforcement
Draft

mjmac wants to merge 1 commit into
mjmac/DAOS-18783-pr4-clientpathfrom
mjmac/DAOS-18783-pr5-enforcement

Conversation

@mjmac

@mjmac mjmac commented Aug 5, 2026 •

Copy link
Copy Markdown
Contributor

When a pool has a CA installed, the engine expects the client to
present a node cert and proof-of-possession in the pool connect
RPC. If the client does not present a valid cert and/or PoP, the
connection is rejected. Pools without a CA accept clients as usual.

Patch: 5/8
Features: pool
Signed-off-by: Michael MacDonald github@macdonald.cx

@github-actions

github-actions Bot commented Aug 5, 2026 •

Copy link
Copy Markdown

Ticket title is 'Implement Client Node Authentication'
Status is 'Open'
https://daosio.atlassian.net/browse/DAOS-19450

@daosbuild3

Copy link
Copy Markdown
Collaborator

@mjmac
mjmac force-pushed the mjmac/DAOS-18783-pr5-enforcement branch from d4ee3c3 to a1c8b8a Compare August 5, 2026 12:30
@mjmac
mjmac force-pushed the mjmac/DAOS-18783-pr5-enforcement branch from a1c8b8a to ac12822 Compare August 12, 2026 15:32
@mjmac mjmac changed the title DAOS-18783 control: enforce per-pool node cert at connect DAOS-19450 control: enforce per-pool node cert at connect Aug 12, 2026
@mjmac
mjmac force-pushed the mjmac/DAOS-18783-pr5-enforcement branch from ac12822 to 4c80f5d Compare August 24, 2026 15:01
@daosbuild3

Copy link
Copy Markdown
Collaborator

@mjmac
mjmac force-pushed the mjmac/DAOS-18783-pr5-enforcement branch from 4c80f5d to 70bcd09 Compare August 25, 2026 01:33
@daosbuild3

Copy link
Copy Markdown
Collaborator

@daosbuild3

Copy link
Copy Markdown
Collaborator

Test stage Unit Test with memcheck completed with status UNSTABLE. https://jenkins-3.daos.hpc.amslabs.hpecorp.net/job/daos-stack/job/daos//view/change-requests/job/PR-18783/5/testReport/

@mjmac
mjmac force-pushed the mjmac/DAOS-18783-pr5-enforcement branch 2 times, most recently from c6232f7 to f4f03db Compare August 25, 2026 13:13
@mjmac
mjmac force-pushed the mjmac/DAOS-18783-pr5-enforcement branch from f4f03db to bdaaedb Compare August 25, 2026 15:29
@mjmac
mjmac force-pushed the mjmac/DAOS-18783-pr5-enforcement branch 2 times, most recently from 4b12e61 to ddc6864 Compare August 27, 2026 14:05
@mjmac
mjmac force-pushed the mjmac/DAOS-18783-pr5-enforcement branch from ddc6864 to 80b0ccb Compare September 2, 2026 18:21
@daosbuild3

Copy link
Copy Markdown
Collaborator

@mjmac
mjmac force-pushed the mjmac/DAOS-18783-pr5-enforcement branch from 80b0ccb to e3807fa Compare September 15, 2026 16:28
@mjmac
mjmac force-pushed the mjmac/DAOS-18783-pr5-enforcement branch from e3807fa to 92e7ae4 Compare September 24, 2026 15:03
@mjmac
mjmac force-pushed the mjmac/DAOS-18783-pr5-enforcement branch from 92e7ae4 to abde461 Compare September 24, 2026 15:09
@mjmac
mjmac force-pushed the mjmac/DAOS-18783-pr5-enforcement branch from abde461 to 4295763 Compare October 8, 2026 19:56
@daosbuild3

Copy link
Copy Markdown
Collaborator

Test stage Unit Test with memcheck completed with status UNSTABLE. https://jenkins-3.daos.hpc.amslabs.hpecorp.net/job/daos-stack/job/daos//view/change-requests/job/PR-18783/15/testReport/

@mjmac
mjmac force-pushed the mjmac/DAOS-18783-pr5-enforcement branch from 4295763 to f04e4c2 Compare October 9, 2026 16:44
@daosbuild3

Copy link
Copy Markdown
Collaborator

Test stage Unit Test with memcheck completed with status UNSTABLE. https://jenkins-3.daos.hpc.amslabs.hpecorp.net/job/daos-stack/job/daos//view/change-requests/job/PR-18783/16/testReport/

@mjmac
mjmac force-pushed the mjmac/DAOS-18783-pr5-enforcement branch from f04e4c2 to 717dd1d Compare October 11, 2026 14:08
@daosbuild3

Copy link
Copy Markdown
Collaborator

Test stage Unit Test with memcheck completed with status UNSTABLE. https://jenkins-3.daos.hpc.amslabs.hpecorp.net/job/daos-stack/job/daos//view/change-requests/job/PR-18783/17/testReport/

@mjmac
mjmac force-pushed the mjmac/DAOS-18783-pr5-enforcement branch from 717dd1d to 23383c0 Compare October 13, 2026 17:48
@mjmac
mjmac force-pushed the mjmac/DAOS-18783-pr5-enforcement branch from 23383c0 to 8ec1644 Compare October 13, 2026 17:53
@daosbuild3

Copy link
Copy Markdown
Collaborator

Test stage Unit Test with memcheck completed with status UNSTABLE. https://jenkins-3.daos.hpc.amslabs.hpecorp.net/job/daos-stack/job/daos//view/change-requests/job/PR-18783/19/testReport/

@mjmac
mjmac force-pushed the mjmac/DAOS-18783-pr5-enforcement branch from 8ec1644 to 034c040 Compare October 16, 2026 13:11
@daosbuild3

Copy link
Copy Markdown
Collaborator

Test stage Unit Test with memcheck completed with status UNSTABLE. https://jenkins-3.daos.hpc.amslabs.hpecorp.net/job/daos-stack/job/daos//view/change-requests/job/PR-18783/20/testReport/

When a pool has a CA installed, the engine expects the client to
present a node cert and proof-of-possession in the pool connect
RPC. If the client does not present a valid cert and/or PoP, the
connection is rejected. Pools without a CA accept clients as usual.

Patch: 5/8
Features: pool
Signed-off-by: Michael MacDonald <github@macdonald.cx>
@mjmac
mjmac force-pushed the mjmac/DAOS-18783-pr5-enforcement branch from 034c040 to 3fb2bdc Compare October 17, 2026 16:53
@daosbuild3

Copy link
Copy Markdown
Collaborator

Test stage Unit Test with memcheck completed with status UNSTABLE. https://jenkins-3.daos.hpc.amslabs.hpecorp.net/job/daos-stack/job/daos//view/change-requests/job/PR-18783/21/testReport/

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

2 participants