mirror of
https://github.com/shankar0123/certctl.git
synced 2026-06-08 04:08:52 +00:00
shankar0123
be72627aeb
M25: After deploying a certificate, the agent probes the live TLS
endpoint and compares SHA-256 fingerprints to verify the correct cert
is being served. Best-effort — failures don't block deployments.
New endpoints: POST /jobs/{id}/verify, GET /jobs/{id}/verification.
Migration 000008 adds verification columns to jobs table.
M26: Traefik target connector (file provider, auto-reload) and Caddy
target connector (dual-mode: admin API hot-reload or file-based).
Both wired into agent dispatch.
Also: restructured README to highlight supported integrations (issuers,
targets, notifiers) earlier, moved API/CLI/MCP sections lower. Updated
all docs (features, connectors, architecture, testing guide, why-certctl)
and fixed integration tests for 18-param RegisterHandlers signature.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
71 lines
2.8 KiB
Go
71 lines
2.8 KiB
Go
package domain
|
|
|
|
import (
|
|
"encoding/json"
|
|
"time"
|
|
)
|
|
|
|
// Job represents a unit of work in the certificate control plane.
|
|
type Job struct {
|
|
ID string `json:"id"`
|
|
Type JobType `json:"type"`
|
|
CertificateID string `json:"certificate_id"`
|
|
TargetID *string `json:"target_id,omitempty"`
|
|
Status JobStatus `json:"status"`
|
|
Attempts int `json:"attempts"`
|
|
MaxAttempts int `json:"max_attempts"`
|
|
LastError *string `json:"last_error,omitempty"`
|
|
ScheduledAt time.Time `json:"scheduled_at"`
|
|
StartedAt *time.Time `json:"started_at,omitempty"`
|
|
CompletedAt *time.Time `json:"completed_at,omitempty"`
|
|
CreatedAt time.Time `json:"created_at"`
|
|
VerificationStatus VerificationStatus `json:"verification_status"`
|
|
VerifiedAt *time.Time `json:"verified_at,omitempty"`
|
|
VerificationError *string `json:"verification_error,omitempty"`
|
|
VerificationFp *string `json:"verification_fingerprint,omitempty"`
|
|
}
|
|
|
|
// JobType represents the classification of work to be performed.
|
|
type JobType string
|
|
|
|
const (
|
|
JobTypeIssuance JobType = "Issuance"
|
|
JobTypeRenewal JobType = "Renewal"
|
|
JobTypeDeployment JobType = "Deployment"
|
|
JobTypeValidation JobType = "Validation"
|
|
)
|
|
|
|
// JobStatus represents the execution state of a job.
|
|
type JobStatus string
|
|
|
|
const (
|
|
JobStatusPending JobStatus = "Pending"
|
|
JobStatusAwaitingCSR JobStatus = "AwaitingCSR"
|
|
JobStatusAwaitingApproval JobStatus = "AwaitingApproval"
|
|
JobStatusRunning JobStatus = "Running"
|
|
JobStatusCompleted JobStatus = "Completed"
|
|
JobStatusFailed JobStatus = "Failed"
|
|
JobStatusCancelled JobStatus = "Cancelled"
|
|
)
|
|
|
|
// DeploymentJob represents a job that deploys a certificate to a target via an agent.
|
|
type DeploymentJob struct {
|
|
Job `json:"job"`
|
|
AgentID string `json:"agent_id"`
|
|
DeploymentResult json.RawMessage `json:"deployment_result,omitempty"`
|
|
}
|
|
|
|
// WorkItem enriches a Job with target details so the agent knows which connector to use.
|
|
// Returned by GET /api/v1/agents/{id}/work.
|
|
type WorkItem struct {
|
|
ID string `json:"id"`
|
|
Type JobType `json:"type"`
|
|
CertificateID string `json:"certificate_id"`
|
|
CommonName string `json:"common_name,omitempty"`
|
|
SANs []string `json:"sans,omitempty"`
|
|
TargetID *string `json:"target_id,omitempty"`
|
|
TargetType string `json:"target_type,omitempty"`
|
|
TargetConfig json.RawMessage `json:"target_config,omitempty"`
|
|
Status JobStatus `json:"status"`
|
|
}
|