dohertj2/lmxopcua
1
0
Fork 0
Code Issues 5 Pull Requests Actions Packages Projects Releases Wiki Activity

Credential preflight/banner: check the merged driver+device config for UserCertificatePath #850

New Issue
Closed
opened 2026-11-11 05:24:27 -05:00 by dohertj2 · 1 comment
dohertj2 commented 2026-11-11 05:24:27 -05:00
Owner
Copy Link
Copy Source

From the #835/#836 review fixes. The deploy gate checks OpcUaClient UserCertificatePath on the config as the runtime merges driver and device configs (DriverDeviceConfigMerger), closing the split AuthType bypass. The upgrade preflight (CredentialReferencePreflight) and the /raw banner check each config separately, so a split case shows up only at deploy. Low priority — the deploy gate is the authority.

From the #835/#836 review fixes. The deploy gate checks OpcUaClient `UserCertificatePath` on the config as the runtime merges driver and device configs (`DriverDeviceConfigMerger`), closing the split `AuthType` bypass. The upgrade preflight (`CredentialReferencePreflight`) and the /raw banner check each config separately, so a split case shows up only at deploy. Low priority — the deploy gate is the authority.
dohertj2 added the driver/opcuaclienttype:followuppriority:p3 labels 2026-11-11 05:24:27 -05:00
dohertj2 commented 2026-11-11 07:55:33 -05:00
Author
Owner
Copy Link
Copy Source

Fixed (3dbfe6ec). Pushed to master in 03e51457. The deploy gate and CredentialReferencePreflight share one merged driver+device check, so a split AuthType/UserCertificatePath case shows on the /raw banner as a Draft finding "(merged with its devices)"; duplicates of per-config findings are suppressed.

Fixed (`3dbfe6ec`). Pushed to master in `03e51457`. The deploy gate and `CredentialReferencePreflight` share one merged driver+device check, so a split AuthType/`UserCertificatePath` case shows on the /raw banner as a Draft finding "(merged with its devices)"; duplicates of per-config findings are suppressed.
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
auto-managed
queue management
 blocked
Blocked by dependency or external hold
 cross-driver
queue management
 cross-repo
Needs coordinated change in another family repo (wire contract etc.)
 driver/abcip
queue management
 driver/ablegacy
queue management
 driver/focas
queue management
 driver/mqtt
MQTT / Sparkplug B broker-subscribe driver
 driver/opcuaclient
queue management
 driver/s7
queue management
 driver/twincat
queue management
 migrated
Migrated from a markdown backlog (2026-11 standardization)
 phase/1
queue management
 phase/2
queue management
 phase/3
queue management
 phase/4
queue management
 phase/5
queue management
 phase/6
queue management
 priority:p0
Must-have / blocking
 priority:p1
High priority
 priority:p2
Normal priority
 priority:p3
Low priority / nice to have
 queue/blocked
queue management
 queue/done
queue management
 queue/failed
queue management
 queue/in-progress
queue management
 queue/queued
queue management
 type:bug
Defect in shipped behaviour
 type:debt
Technical debt / hygiene
 type:deploy-gate
Rollout/deploy/migration step not yet done on an environment
 type:docs
Documentation work
 type:feature
Feature implementation
 type:followup
Follow-up deferred from a plan, PR or gate
 type:infra
Infrastructure and scaffolding
 type:review-finding
Unfixed finding from an architecture/code review
 type:test
Test work
No Label driver/opcuaclient priority:p3 type:followup
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
dohertj2 (dohertj2)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: dohertj2/lmxopcua#850
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?