NationTech/harmony
5
0
Fork 2
Code Issues 40 Pull Requests 13 Actions Packages Projects Releases Wiki Activity

adr/nats-islands-of-trust #209

Merged
wjro merged 17 commits from adr/nats-islands-of-trust into feat/nats 2026-01-23 20:05:59 +00:00
Conversation 1 Commits 17 Files Changed 22 +1710 -4
johnride commented 2026-01-13 15:42:20 +00:00
Owner
Copy Link
No description provided.
johnride added 2 commits 2026-01-13 15:42:22 +00:00
wip nats supercluster
Some checks failed
Run Check Script / check (pull_request) Failing after 51s
Details
270b6b87df
adr: 17-1 nats clusters interconnection using islands of trust. mTLS via shared ca-bundle with each cluster distributing its own CA.
Some checks failed
Run Check Script / check (pull_request) Failing after 51s
Details
1837623394
johnride added 1 commit 2026-01-16 14:46:17 +00:00
feat: Nats supercluster example working
Some checks failed
Run Check Script / check (pull_request) Failing after 42s
Details
ced371ca43
wjro added 14 commits 2026-01-22 16:37:23 +00:00
feat: added cert manager capability as well as scores to install openshift subscription to community cert-manager operator 043cd561e9
feat(cert-manager): added crds for cert-manager d3a8171e3c
wip: added scores and basic implentation to create certs and issuers 947733b240
fix: added create_issuer fn to trait and its implementation is k8sanywhere 26256d9945
feat: added working examples to add self signed issuer and self signed certificate. modified get_resource_json_value to be able to get cluster scoped operators 4f2a7050f5
cargo fmt 502e544cd3
feat: added fn get_ca_cert to trait certificateManagement 865dab2fc1
fix: modified k8sanywhere implentation of get_ca_cert to use the kubernetes certificate name to find its respective secret and ca.crt 779444699f
fix: modified trait to use other return types, modified trait function name to be ensure ready, use rust CRD definitions rather than constructing gvk for certificateManagement trait function in k8sanywhere 2b324d7962
fix: modified score names for better clarity a4515d34ae
lint: Remove useless variable assignment f6a20832cf
fix: moved cert management ensure ready to k8sanywhere bc962be31f
fix: mod.rs 52bff9b6be
feat: added poc for deploying nats supercluster with certificates, issuers, and okd routes
All checks were successful
Run Check Script / check (pull_request) Successful in 1m20s
Details
740b5500f2
johnride reviewed 2026-01-23 16:29:54 +00:00
examples/nats-supercluster/src/main.rs Outdated
@@ -0,0 +190,4 @@
}
struct SiteContext<T> {
name: &'static str,
johnride commented 2026-01-23 15:34:50 +00:00
Author
Owner
Copy Link

Remove name

Remove name
examples/nats-supercluster/src/main.rs
@@ -0,0 +216,4 @@
namespace: Some(namespace.to_string().clone()),
acme_issuer: None,
ca_issuer: Some(CaIssuer {
secret_name: "harmony-root-ca-tls".to_string(),
johnride commented 2026-01-23 15:36:21 +00:00
Author
Owner
Copy Link

extract

extract
examples/nats-supercluster/src/main.rs Outdated
@@ -0,0 +231,4 @@
debug!("creating issuer 'harmony-selfsigned-issuer'");
topology
.create_issuer(
"harmony-selfsigned-issuer".to_string(),
johnride commented 2026-01-23 15:36:43 +00:00
Author
Owner
Copy Link

extract

extract
examples/nats-supercluster/src/main.rs
@@ -0,0 +270,4 @@
async fn add_ca_cert_to_ca_bundle<T: Topology + CertificateManagement>(
topology: T,
bundle: &mut Vec<String>,
johnride commented 2026-01-23 15:38:11 +00:00
Author
Owner
Copy Link

not cool side effect

not cool side effect
wjro added 1 commit 2026-01-23 20:04:06 +00:00
fix: extracted variables, removed uncool side effect
All checks were successful
Run Check Script / check (pull_request) Successful in 1m17s
Details
8657261342
wjro merged commit 093e0d54c0 into feat/nats 2026-01-23 20:05:59 +00:00
wjro deleted branch adr/nats-islands-of-trust 2026-01-23 20:06:00 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
Architecture Decision Record
Good first issue
RFC
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
johnride jvtrudel letian stremblay wjro
No Assignees
2 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: NationTech/harmony#209
No description provided.
Delete Branch "adr/nats-islands-of-trust"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?