cluster: add support of TLS encryption for TiDB cluster#673
cluster: add support of TLS encryption for TiDB cluster#673lucklove merged 13 commits intopingcap:masterfrom
Conversation
Codecov Report
@@ Coverage Diff @@
## master #673 +/- ##
==========================================
+ Coverage 58.07% 58.77% +0.70%
==========================================
Files 255 257 +2
Lines 18904 19439 +535
==========================================
+ Hits 10978 11425 +447
- Misses 6473 6499 +26
- Partials 1453 1515 +62
Flags with carried forward coverage won't be shown. Click here to find out more.
Continue to review full report at Codecov.
|
fad3866 to
4621518
Compare
c0b4fa0 to
87d43bd
Compare
0b90913 to
ecfa558
Compare
7faa9fc to
fc3ccf0
Compare
july2993
left a comment
There was a problem hiding this comment.
Error: failed to transfer CA cert to server: Process exited with status 1
pls fix ci
| // String implements the fmt.Stringer interface | ||
| func (c *TLSCert) String() string { | ||
| return fmt.Sprintf("TLSCert: host=%s role=%s cn=%s", | ||
| c.inst.GetHost(), c.inst.Role(), c.inst.ComponentName()) |
There was a problem hiding this comment.
Role alway = ComponentName ?
There was a problem hiding this comment.
No it's for example tispark-master as role and tispark as component name, identical for most components but not all.
| if !ok { | ||
| return ErrNoExecutor | ||
| } | ||
| if err := e.Transfer(caFile, |
There was a problem hiding this comment.
seems this API should be designed as Transfer and Download at first. (not block this pr)
ac1f874 to
cb1382b
Compare
|
/merge |
|
Your auto merge job has been accepted, waiting for:
|
|
/run-all-tests |
|
@AstroProfundis merge failed. |
|
@AstroProfundis Please resolve the conflicts. |
dc0db75 to
1fac178
Compare
What problem does this PR solve?
Add support for TLS encryption for TiDB cluster. Close #529
What is changed and how it works?
displayoutput for TLS enabled clusterCheck List
Tests
Code changes
Side effects
Related changes
Release notes: