Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

cli: the default tenant scope of cockroach cert create-client is paiful #97584

Closed
knz opened this issue Feb 23, 2023 · 0 comments · Fixed by #97585
Closed

cli: the default tenant scope of cockroach cert create-client is paiful #97584

knz opened this issue Feb 23, 2023 · 0 comments · Fixed by #97585
Labels
A-cli-admin CLI commands that pertain to controlling and configuring nodes C-bug Code not up to spec/doc, specs & docs deemed correct. Solution expected to change code/behavior.

Comments

@knz
Copy link
Contributor

knz commented Feb 23, 2023 •
edited by cockroach-jira-scripts
Loading

With our work on multi-tenancy we want to quickly iterate and run demos.

Against that currently the default --tenant-scope that restricts client certs to just the system tenant is cumbersome.

While tenant scopes are useful, and we like to use them in CC, the CC control plane is generating its TLS certs independently from our CLI code and manages its scopes independently. So we should make the CLI command aid developer productivity instead.

Epic: CRDB-23559

Jira issue: CRDB-24771
@knz knz added C-bug Code not up to spec/doc, specs & docs deemed correct. Solution expected to change code/behavior. A-cli-admin CLI commands that pertain to controlling and configuring nodes labels Feb 23, 2023
@knz knz self-assigned this Feb 23, 2023
@knz knz mentioned this issue Feb 23, 2023
Merged
@craig craig bot closed this as completed in #97585 Feb 24, 2023
@craig craig bot closed this as completed in ae2e8b8 Feb 24, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
A-cli-admin CLI commands that pertain to controlling and configuring nodes C-bug Code not up to spec/doc, specs & docs deemed correct. Solution expected to change code/behavior.
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

cli: don't scope TLS client certs to a specific tenant by default knz/cockroach
1 participant
@knz