Repository navigation
feat: [2/5] add cloud certificate retrieval protocols - #9911
Draft
Abigail Liang (abigailliang-aks-sig-node) wants to merge 1 commit into
Draft
Abigail Liang (abigailliang-aks-sig-node) wants to merge 1 commit into
Abigail Liang (abigailliang-aks-sig-node) wants to merge 1 commit into
Conversation
Contributor
Windows Unit Test Results 3 files 18 suites 1m 6s ⏱️ Results for commit 1e5db7d. ♻️ This comment has been updated with latest results. |
This was referenced Oct 27, 2026
Abigail Liang (abigailliang-aks-sig-node)
added this pull request to stack #9946
October 28, 2026 23:43
Abigail Liang (abigailliang-aks-sig-node)
force-pushed
the
abigailliang/anc-cloud-protocols
branch
from
October 28, 2026 23:49
6bf18a5 to
96140b4
Compare
Separate unchanged WireServer, legacy, and RCV1P retrieval from refresh orchestration. Keep all existing error policies and add direct protocol coverage without activating provisioning. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: be499bac-1283-498e-b5b1-59d8c91047a4
Abigail Liang (abigailliang-aks-sig-node)
force-pushed
the
abigailliang/anc-cloud-protocols
branch
from
October 29, 2026 00:55
96140b4 to
1e5db7d
Compare
Contributor
|
Contributor
|
Contributor
|
This branch has not been deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What this PR does / why we need it:
Part [2/5] of the native ANC cloud-initialization series. Depends on
[1/5] #9910 and is based on
abigailliang/anc-cloud-storesothe incremental review contains only certificate retrieval protocols:
5 files, +422/-3.
and redirect-handling implementation.
ussec/usnatand RCV1P root/intermediate retrieval helpers,resource-name handling, and raw staging-cache writes.
operation-download, and resource-name encoding coverage.
download policy; do not add PEM/X.509 filtering.
These are internal retrieval capabilities, not the complete certificate-refresh
workflow. Opt-in orchestration and the standalone refresh command arrive in
part 3. Scheduling and native provisioning activation arrive only in part 5.
Existing provisioning still uses
init-aks-cloud.sh; NBC, the shell template,CustomData delivery, and VHD mappings are unchanged.
Series and merge order
main.This PR is a dependency draft, not an incomplete implementation. After part 1
merges, merge the updated
maininto this branch before retargeting this PR tomainand running required CI. Updating the branch first preserves theincremental diff even if the prerequisite was squash-merged. Do not merge this
PR into the dependency's feature branch.
The aggregate #9891 and former certificate PR #9902 are retained for reference.
This split preserves published history with additive commits/merges.
Validation
Passed the applicable ANC/parser race suites, CI-pinned golangci-lint v2.14.0
against the preceding layer, and Linux AMD64/ARM64 builds. Direct protocol
coverage includes raw payloads and the legacy trailing-newline quirk.
Azure/VHD end-to-end provisioning has not been run.
Which issue(s) this PR fixes:
No linked issue.