42997487721
79%

Ran 11 Nov 2026 09:43AM UTC

Jobs 1

Files 36

Run time 1min

Badge

Embed ▾

Committed 11 Nov 2026 09:34AM UTC coverage: 78.996%. Remained the same

Build # 42997487721

Build Type

push

github

Committed by

web-flow

Commit Message

CP-312485: Pool-admin permissions and trusted CAs for client certificate auth (#7360)

Client certificate sessions get the pool-admin permissions, and the CAs
for client certificate auth are installed with a new trusted certificate
purpose.

- The design (**trusted-certificates.md**) is updated in the first
commit.
- Client certificate sessions get the permissions of pool-admin. The
client-cert role is removed.
- New purpose client_auth. stunnel on the coordinator uses its CA bundle
and reloads when it changes. CAs installed by
Pool.install_ca_certificate are not used for client certificate auth any
more.
- Only pool-admin can install certificates for this purpose or enable
client certificate auth. Enabling it needs at least one root CA for this
purpose.
- Unit tests are in the last commit.

make test, make check and the quality gate pass.

Coverage Stats

3667 of 4642 relevant lines covered (79.0%)

0.79 hits per line

Jobs

ID	Job ID	Ran	Files	Coverage
1	python3.11 - 42997487721.1	11 Nov 2026 09:43AM UTC	36	79.0	GitHub Action Run

xapi-project / xen-api / 42997487721
79%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 42997487721

xapi-project / xen-api / 42997487721 79%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 42997487721

xapi-project / xen-api / 42997487721
79%

README BADGES
x