feat(M44): Google CAS issuer connector

Google Cloud Certificate Authority Service integration via REST API
with OAuth2 service account auth (JWT→access token). Synchronous
issuance model, CA pool selection, mutex-guarded token caching,
revocation with RFC 5280 reason mapping. No Google SDK dependency —
all stdlib. 19 tests with httptest mock OAuth2 + CAS API.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
This commit is contained in:
Shankar
2026-04-03 21:25:34 -04:00
parent 37377eec27
commit 4cc91d0f28
12 changed files with 1608 additions and 7 deletions
+13
View File
@@ -135,6 +135,19 @@ export const issuerTypes: IssuerTypeConfig[] = [
{ key: 'base_url', label: 'Base URL', required: false, placeholder: 'https://cert-manager.com/api' },
],
},
{
id: 'GoogleCAS',
name: 'Google CAS',
description: 'Google Cloud Certificate Authority Service \u2014 managed private CA on GCP',
icon: '\u2601\uFE0F',
configFields: [
{ key: 'project', label: 'GCP Project ID', required: true, placeholder: 'my-gcp-project' },
{ key: 'location', label: 'Location', required: true, placeholder: 'us-central1' },
{ key: 'ca_pool', label: 'CA Pool', required: true, placeholder: 'my-ca-pool' },
{ key: 'credentials', label: 'Service Account JSON Path', required: true, placeholder: '/path/to/credentials.json', sensitive: true },
{ key: 'ttl', label: 'Default TTL', required: false, placeholder: '8760h' },
],
},
{
id: 'entrust',
name: 'Entrust',