git-echo/linux_patch_api
Private
Public Access
1
0
Fork 0
Code Releases 32 Wiki Activity

feat: add self-enrollment workflow for automated PKI provisioning
Some checks failed
CI/CD Pipeline / Code Format (push) Failing after 1s
Details
CI/CD Pipeline / Clippy Lints (push) Failing after 43s
Details
CI/CD Pipeline / Enrollment Tests (push) Has been skipped
Details
CI/CD Pipeline / Verify Enrollment CLI Flag (push) Has been skipped
Details
CI/CD Pipeline / All Unit Tests (push) Successful in 1m14s
Details
CI/CD Pipeline / Build Debian Package (push) Has been skipped
Details
CI/CD Pipeline / Build Debian Package (Ubuntu 22.04) (push) Has been skipped
Details
CI/CD Pipeline / Build RPM Package (push) Has been skipped
Details
CI/CD Pipeline / Build Alpine Package (push) Has been skipped
Details
CI/CD Pipeline / Build Arch Package (push) Has been skipped
Details
CI/CD Pipeline / Security Audit (push) Successful in 5s
Details

Browse Source 
- Phase 1: CLI args (--enroll flag), enroll module skeleton, config support
- Phase 2: Registration request, polling loop (24h timeout), main.rs integration
- Phase 3: PKI extraction, atomic cert writing, whitelist auto-append, mTLS transition
- Phase 4: E2E test suite, README/DEPLOYMENT docs, CI pipeline
- Phase 5: SPEC.md, API_DOCUMENTATION.md, CHANGELOG.md, ROADMAP.md sync

Security review: APPROVED (0 critical, 0 high findings)
Cross-distro compatible: Debian/Ubuntu, RHEL/CentOS/Fedora, Alpine, Arch Linux
This commit is contained in:
Echo
2026-05-17 05:30:42 +00:00
parent d297c8d3b1
commit 9a129170f8
25 changed files with 4610 additions and 70 deletions
Download Patch File Download Diff File Expand all files Collapse all files

19
CHANGELOG.md
View File

@ -7,6 +7,24 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
---
## [Unreleased]
### Added
- **Self-enrollment workflow**: Automated host registration with linux_patch_manager
- CLI flag: `--enroll <MANAGER_URL>` for enrollment mode
- Three-phase enrollment: Registration → Polling (24h timeout) → PKI Provisioning
- Automatic certificate provisioning to configured mTLS paths
- Automatic manager IP whitelist append after successful enrollment
- Configurable polling interval (default 60s) and max attempts (default 1440/24h)
- Signal handling for graceful shutdown during enrollment
- Enrollment configuration section in config.yaml (`enrollment.*`)
- Identity extraction module (machine-id, FQDN, IP addresses, OS details)
- PKI bundle validation with PEM format checking
- Atomic certificate file writing with secure permissions (key=0600, certs=0644)
- Whitelist auto-append with file locking and duplicate detection
---
## [1.0.0] - 2026-07-17
### Added
@ -191,6 +209,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
| Version | Release Date | Status | Key Milestone |
|---------|--------------|--------|---------------|
| Unreleased | TBD | In Development | Self-enrollment feature complete |
| 1.0.0 | 2026-07-17 | Production | Initial production release |
| 0.1.0 | 2026-04-09 | Development | Initial development release |