Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

*: support TLS #40

Merged
merged 2 commits into from
Feb 19, 2020
Merged

*: support TLS #40

merged 2 commits into from
Feb 19, 2020

Conversation

kennytm
Copy link
Collaborator

@kennytm kennytm commented Feb 10, 2020

What have you changed? (mandatory)

Fix #39. Recognize the security config and pass the security manager around when gRPC connections are needed.

What are the type of the changes? (mandatory)

  • New feature (change which adds functionality)

How has this PR been tested? (mandatory)

Manually checked in the TiDB Lightning Integrated Test Cluster.

Does this PR affect TiDB Lightning? (mandatory)

Yes

Refer to a related PR or issue link (optional)

pingcap/tidb-lightning#262

Benchmark result if necessary (optional)

Add a few positive/negative examples (optional)

Signed-off-by: kennytm <kennytm@gmail.com>
@kennytm kennytm added Should Update Ansible The config in TiDB-Ansible should be updated Should Update Docs Should update docs after this PR is merged. Remove this label once the docs are updated status/PTAL This PR is ready for review. Add this label back after committing new changes labels Feb 10, 2020
@kennytm
Copy link
Collaborator Author

kennytm commented Feb 12, 2020

PTAL @overvenus @3pointer cc @DanielZhangQD

Copy link
Member

@overvenus overvenus left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, could you add a test?

also added a test to ensure non-TLS-client <-> TLS-server fails.

Signed-off-by: kennytm <kennytm@gmail.com>
@kennytm kennytm added status/LGT1 One reviewer already commented LGTM (LGTM1) and removed status/PTAL This PR is ready for review. Add this label back after committing new changes labels Feb 12, 2020
@kennytm kennytm added status/LGT2 Two reviewers already commented LGTM, ready for merge (LGTM2) and removed status/LGT1 One reviewer already commented LGTM (LGTM1) labels Feb 19, 2020
@kennytm kennytm merged commit b9e347f into master Feb 19, 2020
@kennytm kennytm deleted the kennytm/tls branch February 19, 2020 06:59
kennytm added a commit that referenced this pull request Feb 28, 2020
* *: support TLS

Signed-off-by: kennytm <kennytm@gmail.com>

* tests/integrations: make the entire test run on TLS connection

also added a test to ensure non-TLS-client <-> TLS-server fails.

Signed-off-by: kennytm <kennytm@gmail.com>
kennytm added a commit that referenced this pull request Mar 2, 2020
* *: support TLS (#40)

* *: support TLS

Signed-off-by: kennytm <kennytm@gmail.com>

* tests/integrations: make the entire test run on TLS connection

also added a test to ensure non-TLS-client <-> TLS-server fails.

Signed-off-by: kennytm <kennytm@gmail.com>

* Cargo.toml: set version to 3.0.11

Signed-off-by: kennytm <kennytm@gmail.com>
3pointer pushed a commit to 3pointer/importer that referenced this pull request Apr 2, 2020
* *: support TLS

Signed-off-by: kennytm <kennytm@gmail.com>

* tests/integrations: make the entire test run on TLS connection

also added a test to ensure non-TLS-client <-> TLS-server fails.

Signed-off-by: kennytm <kennytm@gmail.com>
3pointer pushed a commit to 3pointer/importer that referenced this pull request Apr 2, 2020
* *: support TLS

Signed-off-by: kennytm <kennytm@gmail.com>

* tests/integrations: make the entire test run on TLS connection

also added a test to ensure non-TLS-client <-> TLS-server fails.

Signed-off-by: kennytm <kennytm@gmail.com>
kennytm added a commit to 3pointer/importer that referenced this pull request Apr 2, 2020
* *: support TLS (tikv#40)

* *: support TLS

Signed-off-by: kennytm <kennytm@gmail.com>

* tests/integrations: make the entire test run on TLS connection

also added a test to ensure non-TLS-client <-> TLS-server fails.

Signed-off-by: kennytm <kennytm@gmail.com>
3pointer added a commit that referenced this pull request Apr 2, 2020
* Cherry-pick TLS support to release-3.1 (#44)

* *: support TLS (#40)

* *: support TLS

Signed-off-by: kennytm <kennytm@gmail.com>

* tests/integrations: make the entire test run on TLS connection

also added a test to ensure non-TLS-client <-> TLS-server fails.

Signed-off-by: kennytm <kennytm@gmail.com>

* tests: fix build failure

Signed-off-by: kennytm <kennytm@gmail.com>

Co-authored-by: kennytm <kennytm@gmail.com>
@kennytm kennytm removed the Should Update Docs Should update docs after this PR is merged. Remove this label once the docs are updated label Jun 17, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Should Update Ansible The config in TiDB-Ansible should be updated status/LGT2 Two reviewers already commented LGTM, ready for merge (LGTM2)
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Support TLS for security
3 participants