Ilker ManapandClaude Opus 5.5 191c65e3db Put etcd and Patroni's API on TLS, and move a running cluster there in maintenance mode ...

Members' etcd speaks TLS to peers and clients with a certificate from the
cluster's authority and asks clients for one; Patroni reaches it with the
member's certificate and serves its API over TLS. A running plain-HTTP
cluster is moved with Patroni paused, so PostgreSQL serves throughout:
Patroni's lease-free keys are carried over to the new etcd.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

2026-10-04 12:07:17 +02:00

..

ca_test.go

Add a private CA and mutual TLS for the agent stream

2026-09-16 07:28:56 +02:00

ca.go

Put etcd and Patroni's API on TLS, and move a running cluster there in maintenance mode

2026-10-04 12:07:17 +02:00

expiry.go

Park a model that fails every time it starts, and say so everywhere

2026-09-30 01:21:57 +02:00

tlsconf.go

Add a private CA and mutual TLS for the agent stream

2026-09-16 07:28:56 +02:00