alternator-load-balancing icon indicating copy to clipboard operation
alternator-load-balancing copied to clipboard

Support CA in the LB code

Open scylladb-buff opened this issue 1 year ago • 5 comments

Currently, the alternator LB code example does not allow you to specify the certificate authority root certificate. In a recent cloud release, all cluster certificates are signed by a service-wide CA that can be downloaded from the cloud and API. We need to add support for this.

There is a workaround adding the root certificate to the OS chain of trust, but in some user setups, this might not be the best solution. The change is related to: alternator-load-balancing/go/v2/alternator_lb.go at 3b898423cb9246e2b2a63300762b499ce46db8b0 · scylladb/alternator-load-balancing

scylladb-buff avatar Aug 06 '24 08:08 scylladb-buff

@dkropachev is this something that you can do as part of the drivers project?

CC: @nyh

scylladb-buff avatar Aug 06 '24 08:08 scylladb-buff

@scylladb-buff , is there any urgency behind this ? I can't push it to this sprint or next sprint unless it is urgent.

dkropachev avatar Aug 06 '24 11:08 dkropachev

@scylladb-buff, @mykaul, this repo is not under scylla-driver umbrella and therefore I don't have access, could you please take a look at this PR

dkropachev avatar Aug 12 '24 02:08 dkropachev

@scylladb-buff, @mykaul, this repo is not under scylla-driver umbrella and therefore I don't have access, could you please take a look at this PR

Shouldn't this be supported in all language flavors, not only Go? Pardon if you're planning to add this feature in a separate pull request; just wanted to be sure of that.

ksinica avatar Aug 19 '24 14:08 ksinica

We should add this to all drivers, but the priority for the rest is lower.

scylladb-buff avatar Aug 19 '24 14:08 scylladb-buff