Certificate lifecycle: per-name inspect endpoint #43
Loading…
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Deferred from the per-name ACME work (spec:
obsidian/Personal/Projects/edge-router/specs/2026-10-22-remove-tpm-openbao-encryption-design.md).Detail for one certificate beyond what the list gives: the full chain, SANs, issuer, serial, and the order/attempt history.
Why it waits: the removal work ships a list carrying each name's expiry, last renewal and last error, which is what
/readyneeds and what diagnoses a stuck renewal. Inspect is strictly extra, and the attempt-history part implies retaining history the current schema does not keep (onelast_errorand onelast_attempt_atper row, not a log).Decide first: whether attempt history is worth a table, or whether inspect should only report present state. The former is the useful version and the more expensive one.