mirror of https://github.com/dolthub/dolt.git synced 2026-03-07 10:18:44 -06:00

Files

Aaron Son b22fbf11f2 go/libraries/doltcore/sqle/cluster: Add JWT authentication for peer communication to cluster replicas.

A remotesapi server running on a cluster replica publishes a JWKS.

Every outbound GRPC call the cluster replica makes includes a JWT signed with a
private key.

remotesapi servers running on cluster replicas require and validate incoming
JWTs for cluster traffic. The set of valid signing keys is taken from the
JWKSes which are published at /.well-known/jwks.json on the standby replica
hosts.

It is possible to configure tls_ca on cluster remotesapi to configure the set
of trusted roots for outbound TLS connections. Because the JWKSes are served
over the same connection, and becuase signed JWTs are not replay resistent, TLS
is recommended for all deployment topologies.

2022-11-10 09:26:38 -08:00

gencerts

go/libraries/doltcore/sqle/cluster: Add the ability to configure SAN assertions on URIs and DNS names in the server certificate when configuring TLS.

2022-10-28 10:31:14 -07:00

genjwt

go/libraries/doltcore/sqle/cluster: Add the ability to generate a keypair, serve a JWKS, and sign outbound RPCs with a JWT.

2022-11-02 09:54:09 -07:00

testdata

go/libraries/doltcore/sqle/cluster: Add the ability to generate a keypair, serve a JWKS, and sign outbound RPCs with a JWT.

2022-11-02 09:54:09 -07:00

tests

go/libraries/doltcore/sqle/cluster: Add JWT authentication for peer communication to cluster replicas.

2022-11-10 09:26:38 -08:00

cmd_unix.go

.github/workflows: ci-sql-server-integration-tests.yaml: More iteration, try a GracefulStop for Windows.

2022-10-04 13:54:31 -07:00

cmd_windows.go

.github/workflows/ci-sql-server-integration-tests.yaml: Disable windows for now.

2022-10-04 14:34:34 -07:00

cmd.go

go/libraries/doltcore/sqle/cluster: Add the ability to generate a keypair, serve a JWKS, and sign outbound RPCs with a JWT.

2022-11-02 09:54:09 -07:00

go.mod

.github/workflows: ci-sql-server-integration-tests.yaml: More iteration, try a GracefulStop for Windows.

2022-10-04 13:54:31 -07:00

go.sum

.github/workflows: ci-sql-server-integration-tests.yaml: More iteration, try a GracefulStop for Windows.

2022-10-04 13:54:31 -07:00

main_test.go

go/libraries/doltcore/sqle/cluster: Add the ability to generate a keypair, serve a JWKS, and sign outbound RPCs with a JWT.

2022-11-02 09:54:09 -07:00

README.md

First pass on a basic smoke test for the Prisma ORM. Reproduces the issue from: https://github.com/dolthub/dolt/issues/4511

2022-10-31 15:08:23 -07:00

testdef.go

go/libraries/doltcore/sqle/cluster: Add the ability to generate a keypair, serve a JWKS, and sign outbound RPCs with a JWT.

2022-11-02 09:54:09 -07:00

README.md

go-sql-server-driver

This is a driver and a test suite for tests interacting with dolt sql-server. These tests describe a setup for the sql-server(s) which should be running, the interactions which should be run against the servers, and the assertions which should pass given those interactions.

This is meant to be more declarative and more robust than using bats for these integration tests.

Something belongs in this package if it primarily tests interactions with the exposed MySQL port on the sql-server.

Something belongs in bats if it primarily tests interactions with the dolt binary itself. One example for the dolt sql-server command itself would be testing config validation which results in exit codes or help text displayed.