Skip to content

[DPE-10184] fix mtls certificate for cross-model-relations#266

Draft
reneradoi wants to merge 1 commit into
mainfrom
mtls-cross-model-relations
Draft

[DPE-10184] fix mtls certificate for cross-model-relations#266
reneradoi wants to merge 1 commit into
mainfrom
mtls-cross-model-relations

Conversation

@reneradoi
Copy link
Copy Markdown

This PR fixes an issue when providing the mTLS certificate in a cross-model relation.

Due to juju/juju#21248 (comment), granting a Juju secret from the requirer side of a cross-model relations fails with sharing consumer secrets across a cross model relation not supported. The proposed workaround from DA264 is to place the mtls-cert into regular relation data instead of a secret, if the relation is a cross-model relation.

The scope of this PR is to fix this issue for data-interfaces v0. The required fixes for v1 will be provided in a separate PR to https://github.com/canonical/data-platform-charmlibs.

Changes:

  • add property for cross-model-relation to RequirerData class
  • exclude mtls-cert from requirer secrets in cross-model-relations

…`mtls-cert` from requirer secrets in cross-model-relations
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant