 Shankar
|
27d2f8b95e
|
feat: M18b Filesystem Certificate Discovery — agent scanning, server dedup, triage API
Agent-side:
- Filesystem scanner walks configured directories (CERTCTL_DISCOVERY_DIRS)
- Parses PEM (.pem, .crt, .cer, .cert) and DER (.der) certificate files
- Extracts CN, SANs, serial, issuer/subject DN, validity, key info, SHA-256 fingerprint
- Reports discoveries to control plane on startup + every 6 hours
- Skips files >1MB and private key files
Server-side:
- Migration 000006: discovered_certificates + discovery_scans tables
- Domain model: DiscoveredCertificate, DiscoveryScan, DiscoveryReport
- Three triage states: Unmanaged, Managed (claimed), Dismissed
- Repository with upsert dedup (fingerprint + agent + path)
- Service layer: process reports, claim, dismiss, list, summary
- 7 new API endpoints (84 total):
POST /agents/{id}/discoveries, GET /discovered-certificates,
GET /discovered-certificates/{id}, POST .../claim, POST .../dismiss,
GET /discovery-scans, GET /discovery-summary
- Audit trail: scan_completed, cert_claimed, cert_dismissed events
Tests: 28 new test functions (domain, handler, service layers)
Docs: README, quickstart, demo-guide, demo-advanced, architecture,
concepts, connectors, features.md all updated
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
|
2026-03-24 00:25:00 -04:00 |
|
|
Shankar
|
5ac1bbbc4c
|
docs: add feature inventory, complete demo-advanced and architecture coverage
- Create docs/features.md — comprehensive V2 feature inventory (15+ sections
covering all 77 endpoints, 4 issuers, 5 targets, 6 notifiers, profiles,
agent groups, revocation, observability, CLI, MCP, and configuration)
- Update docs/demo-advanced.md — add Parts 10-13 (Certificate Profiles,
Agent Groups, Interactive Approval, Advanced Query Features), fix
notification channel count (2→6), fix scheduler loop count (4→5),
update architecture summary flowchart
- Update docs/architecture.md — add revocation data flow diagram (Section
3.5), profile enforcement note, M20 Enhanced Query API section, OpenAPI
spec reference, CLI Tool section, update connector test counts (23→57),
add e2e_test.go mention
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
|
2026-03-23 21:49:26 -04:00 |
|