Skip to content

feat: automatic certificate rotation for site identities (spiffe peer trust) - #273

Closed
hexfusion wants to merge 29 commits into
praxis-proxy:mainfrom
hexfusion:pr/site-identity-renewal
Closed

hexfusion wants to merge 29 commits into
praxis-proxy:mainfrom
hexfusion:pr/site-identity-renewal

docs: install the enrollment service in its own namespace in every step

31fa198
Select commit
Loading
Failed to load commit list.
DCO-2 / DCO succeeded Oct 4, 2026 in 1s

Check passed!

All commits are signed off, the check passed.

Summary


Sha Message Pass or fail reason
🟢 4e6b46e fix(operator): start in the install's grid modes b... Valid sign-off found
🟢 0cfa6eb feat(enrollment): renew a site identity with its c... Valid sign-off found
🟢 00cfc36 feat(enrollment): seed reserved names, freeze fork... Valid sign-off found
🟢 0f87a1d fix(enrollment): never mint a grid CA over one in ... Valid sign-off found
🟢 20af9a2 feat(certs): issue site certificates for 180 days Valid sign-off found
🟢 5d841d6 feat(operator): renew the site identity before it ... Valid sign-off found
🟢 31cf0d9 test(enrollment): random walks of the identity lif... Valid sign-off found
🟢 42c7b76 docs: document site identity renewal Valid sign-off found
🟢 0fcfb51 test(e2e): renew, fork, and re-enroll in the hub-s... Valid sign-off found
🟢 e7f30eb refactor: call site identity renewal certificate r... Valid sign-off found
🟢 bebb85c docs(grid-enrollment): list the hub bootstrap Secr... Valid sign-off found
🟢 c93b9ff test(praxis-gateway): pin the base config checksum... Valid sign-off found
🟢 00d2ca1 test(enrollment): expect the integration-test lint... Valid sign-off found
🟢 c5bbe9b fix(operator): zero the identity expiry gauge when... Valid sign-off found
🟢 dae41f3 docs: say when pin is the default and that rotatio... Valid sign-off found
🟢 cd1ad7e fix(operator): follow the install's trust before a... Valid sign-off found
🟢 131c8ae test(e2e): declare each operator install's peer tr... Valid sign-off found
🟢 d9de58c docs(grid-enrollment): say a local token may delet... Valid sign-off found
🟢 96d2cdd test(grid-operator): drop a trailing blank line Valid sign-off found
🟢 55a7b13 fix(enrollment): name no single operation in the g... Valid sign-off found
🟢 dccc502 test(e2e): stop the hub path monitor's port-forwar... Valid sign-off found
🟢 4baba6c ci: name the hub-site legs by what they test Valid sign-off found
🟢 91ae800 fix(operator): retry a gateway roll a rotation is ... Valid sign-off found
🟢 d3b6fa0 docs: say rotation before a GridNetwork follows th... Valid sign-off found
🟢 2ff8989 docs: separate what reloads a rotated identity fro... Valid sign-off found
🟢 569d3ad test(operator): explain the gateway annotation the... Valid sign-off found
🟢 511c4ad fix(operator): point a spent site name at deleting... Valid sign-off found
🟢 edf5402 docs: reduce site enrollment to steps and a debugg... Valid sign-off found
🟢 31fa198 docs: install the enrollment service in its own na... Valid sign-off found