Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

cli/sql: make it easier to switch users/tenants when TLS client cert authn is used #101986

Closed
knz opened this issue Apr 21, 2023 · 0 comments · Fixed by #101987
Closed

cli/sql: make it easier to switch users/tenants when TLS client cert authn is used #101986

knz opened this issue Apr 21, 2023 · 0 comments · Fixed by #101987
Assignees
@knz
Labels
C-bug Code not up to spec/doc, specs & docs deemed correct. Solution expected to change code/behavior.

Comments

@knz
Copy link
Contributor

knz commented Apr 21, 2023 •
edited
Loading

Describe the problem

Currently the \c command in the shell doesn't know how to generate TLS client cert/key paths when switching users or servers. This makes it hard to:

  • change from one user to another when both use TLS client cert authn and the cert/key files are known for both
  • change from non-root user in app tenant to root user in system tenant in shared-process multitenancy

Expected behavior

We'd like an option for \c to auto-compute cert and key directories.

Epic: CRDB-26691

Jira issue: CRDB-27201
@knz knz added the C-bug Code not up to spec/doc, specs & docs deemed correct. Solution expected to change code/behavior. label Apr 21, 2023
@knz knz mentioned this issue Apr 21, 2023
Merged
@craig craig bot closed this as completed in aa2c52b May 11, 2023
@craig craig bot closed this as completed in #101987 May 11, 2023
@blathers-crl blathers-crl bot mentioned this issue May 11, 2023
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@knz knz

Labels
C-bug Code not up to spec/doc, specs & docs deemed correct. Solution expected to change code/behavior.
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

cli/sql: new option autocerts for TLS client cert auto-discovery knz/cockroach
1 participant
@knz