Consider storing the entire chain in network device's gRPC certificate
Open, LowPublic
Actions

Assigned To

None

Authored By

	ayounsi
	Sep 24 2024, 1:23 PM

Description

Opening this task to not forget.

So far it only have the end certificate, so external tools, like prometheus need extra config to be able to verify the certificate.

	Subject	Repo	Branch	Lines +/-
	gNMI prometheus check: add specific network CA cert	operations/puppet	production	+10 -2

ayounsi triaged this task as Low priority.Sep 24 2024, 1:23 PM

ayounsi created this task.

Restricted Application added a subscriber: Aklapper. · View Herald Transcript

Change #1075235 had a related patch set uploaded (by Ayounsi; author: Ayounsi):

[operations/puppet@production] gNMI prometheus check: add specific network CA cert

Change #1075235 merged by Ayounsi:

[operations/puppet@production] gNMI prometheus check: add specific network CA cert