[DPE-7602] TLS implementation (#9)

* Multinode deployment.

* Add collect_app_status handler and config integration test.

* Ger rid of collect_status in charm.py.

* Review suggestions.

* Review suggestions.

* Add spread tests.

* Set UnitWorkloadState.ACTIVE only after unit actually ready. Change ClusterState.active -> is_active. Suppress exec error logging during is_healthy check.

* Increase timeout for multinode deployment.

* [DPE-7602] Add internal TLS

* Multinode deployment.

* Add collect_app_status handler and config integration test.

* Ger rid of collect_status in charm.py.

* Review suggestions.

* Review suggestions.

* Add spread tests.

* Set UnitWorkloadState.ACTIVE only after unit actually ready. Change ClusterState.active -> is_active. Suppress exec error logging during is_healthy check.

* Increase timeout for multinode deployment.

* Documentation

* Documentation.

* Documentation.

* Fix unit tests.

* Fix unit tests, add ops-scenario.

* Documentation.

* [DPE-7602] Add internal TLS

* [DPE-7602] Fix lock file

* [DPE-7602] Add TLS events

* [DPE-7602] Add TLS events

* [DPE-7602] Add TLS events

* [DPE-7602] Add TLS events

* [DPE-7602] Add TLS events

* [DPE-7602] Add TLS events

* [DPE-7602] Add TLS events

* [DPE-7602] Add TLS events

* [DPE-7602] Add TLS events

* [DPE-7602] Add TLS events

* [DPE-7602] Add TLS events

* [DPE-7602] Add TLS events

* [DPE-7602] Add TLS events

* [DPE-7602] Add TLS events

* [DPE-7602] Add TLS events

* [DPE-7602] Add TLS events

* [DPE-7602] Add TLS events

* [DPE-7602] Test SANS

* [DPE-7602] Test Self Signed

* [DPE-7602] Test Self Signed

* [DPE-7602] Test Self Signed

* [DPE-7602] Test Self Signed

* [DPE-7602] Test Self Signed

* [DPE-7602] Test Self Signed

* [DPE-7602] Test Self Signed

* [DPE-7602] Test Self Signed

* [DPE-7602] Test Self Signed

* [DPE-7602] Test Self Signed

* [DPE-7602] Test Self Signed

* [DPE-7602] Test Self Signed

* Bootstrap using rolling ops.

* Fix unit tests.

* [DPE-7602] Refactor manager state usage

* [DPE-7602] Refactor manager state usage

* [DPE-7602] Refactor manager state usage

* [DPE-7602] Refactor manager state usage

* [DPE-7602] Refactor manager state usage

* [DPE-7602] Add truststore and keystore secrets

* [DPE-7602] Add truststore and keystore secrets

* [DPE-7602] Add truststore and keystore secrets

* [DPE-7602] Add truststore and keystore secrets

* [DPE-7602] Add truststore and keystore secrets

* [DPE-7602] Add truststore and keystore secrets

* [DPE-7602] Add truststore and keystore secrets

* [DPE-7602] Add truststore and keystore secrets

* [DPE-7602] Add truststore and keystore secrets

* [DPE-7602] Add truststore and keystore secrets

* [DPE-7602] Add truststore and keystore secrets

* [DPE-7602] Add truststore and keystore secrets

* Improve bootstrap logic. Izolate config reading only to start and config changed events. Add state to the config manager.

* [DPE-7602] Add deploy tls integration test

* [DPE-7602] Add deploy tls integration test

* [DPE-7602] Add deploy tls integration test

* [DPE-7602] Add deploy tls integration test

* [DPE-7602] Add deploy tls integration test

* [DPE-7602] Add deploy tls integration test

* [DPE-7602] Add deploy tls integration test

* [DPE-7602] Add deploy tls integration test

* [DPE-7602] Add deploy tls integration test

* [DPE-7602] Add deploy tls integration test

* [DPE-7602] Add deploy tls integration test

* [DPE-7602] Add deploy tls integration test

* [DPE-7602] Add deploy tls integration test

* [DPE-7602] Add deploy tls integration test

* [DPE-7602] Add deploy tls integration test

* [DPE-7602] Add deploy tls integration test

* [DPE-7602] Add deploy tls integration test

* Wait exponentially with timeout of 30 minutes in bootstrap process.

* [DPE-7602] Add deploy tls integration test

* [DPE-7602] Add deploy tls integration test

* [DPE-7602] Add deploy tls integration test

* [DPE-7602] Add deploy tls integration test

* [DPE-7602] Add deploy tls integration test

* [DPE-7602] Add deploy tls integration test

* [DPE-7602] Add deploy tls integration test

* [DPE-7602] Add deploy tls integration test

* [DPE-7602] Add deploy tls integration test

* [DPE-7602] Add deploy tls integration test

* [DPE-7602] Add deploy tls integration test

* [DPE-7602] Add deploy tls integration test

* [DPE-7602] Add deploy tls integration test

* [DPE-7602] Add deploy tls integration test

* [DPE-7602] Add deploy tls integration test

* Improve unit tests. Fix invalid config early exit in start event.

* [DPE-7602] Add deploy tls integration test

* [DPE-7602] Add deploy tls integration test

* [DPE-7602] Add unit tests for tls

* Fix merge

* tls Fix tests

* Fix tests

* Add unit tests

* Add unit tests

* Add unit tests

* Add unit tests

* Add unit tests

* Add unit tests

* Format

* Fix tests

* Fix tests

* Fix tests

* Add spread task

* Refactor

* Refactor

* Refactor

* Refactor

* Refactor

* Refactor

* Refactor

* Refactor

* Refactor

* Update src/events/tls.py

Co-authored-by: Vladyslav Tarasenko <[email protected]>

* Update src/managers/tls.py

Co-authored-by: Vladyslav Tarasenko <[email protected]>

* Refactor

* Refactor

* Refactor

* Refactor

* Refactor

* Refactor

---------

Co-authored-by: Vladyslav Tarasenko <[email protected]>

Author: BON4

charmcraft.yaml

@@ -1,6 +1,5 @@
 # Copyright 2025 Canonical Ltd.
 # See LICENSE file for licensing details.
-
 type: charm
 platforms:
   [email protected]:amd64:
@@ -22,6 +21,8 @@ charm-libs:
     version: "0"
   - lib: rolling_ops.rollingops
     version: "0"
+  - lib: tls_certificates_interface.tls_certificates
+    version: "4"
 
 config:
   options:
@@ -40,6 +41,16 @@ peers:
   bootstrap:
     interface: rolling_op
 
+requires:
+  client-certificates:
+    interface: tls-certificates
+    limit: 1
+    optional: true
+  peer-certificates:
+    interface: tls-certificates
+    limit: 1
+    optional: true
+
 parts:
   # "poetry-deps" part name is a magic constant
   # https://github.com/canonical/craft-parts/pull/901