[FEATURE REQUEST] [Upgrade] Add migration from ODFE demo certificates to generated ones
See original GitHub issueIs your feature request related to a problem? Please describe. We should remove demo certificates and replace them with self-generated.
Describe the solution you’d like
Using admin certificate is convenient for authentication to API. Installation of ODFE creates demo certificates and one of them is for admin user (kirk). This certificate can be used in apply
mode but at the end it should be removed (other certificates to be checked). So it will be not available for upgrade
mode.
Possible solutions (all assume that at least demo admin cert is removed):
- Generate self-signed certificates
- For upgrade mode use only password
- Allow user to provide their own certificates
- Mix from 1-3
Describe alternatives you’ve considered See above.
Additional context n/a
DoD checklist
- Changelog updated
- COMPONENTS.md updated / doesn’t need to be updated
- Feature has automated tests
- Automated tests passed (QA pipelines)
- apply
- upgrade
- Idempotency tested
- Documentation added / updated / doesn’t need to be updated
- All conversations in PR resolved
- Solution meets requirements and is done according to design doc
- Usage compliant with license
Issue Analytics
- State:
- Created 3 years ago
- Comments:6 (4 by maintainers)
Top Results From Across the Web
Upgrade from Elasticsearch OSS to OpenSearch
If you are upgrading an Open Distro for Elasticsearch cluster, we recommend first upgrading to ODFE 1.13 and then upgrading to OpenSearch.
Read more >Update security certificates with a different CA
Updating node security certificates ... You only need to complete this step one time. ... you'll need to generate Certificate Signing Requests (CSRs)....
Read more >How to Migrate from Elasticsearch to OpenSearch
OpenSearch supports migration to Elasticsearch using rolling upgrades. There're 4 methods to migrate data from Elasticsearch to OpenSearch...
Read more >Creating and Using HTTP Client SDKs in .NET 6
In this article, the author explains the process behind developing HTTP Client SDKs in .NET 6. The article also contains a sample SDK ......
Read more >Migration from SHA-1 to SHA-2 certificates is needed after ...
If you upgrade ePO from an older version, migrate the SHA-1 certificates to SHA-2 certificates using the following steps:.
Read more >Top Related Medium Post
No results found
Top Related StackOverflow Question
No results found
Troubleshoot Live Code
Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start FreeTop Related Reddit Thread
No results found
Top Related Hackernoon Post
No results found
Top Related Tweet
No results found
Top Related Dev.to Post
No results found
Top Related Hashnode Post
No results found
Top GitHub Comments
@mkyc Yes, it should. Updated
Releases
.Tested logging component after refactoring: ✔️
epicli apply
✔️epicli re-apply
✔️epicli upgrade
from v0.7 to develop ✔️epicli upgrade
from v0.8 to develop