test(e2e): multi-member TLS quorum + PeerCANotShared#378

Draft

xrl wants to merge 15 commits into

etcd-io:mainfrom

xrl:pr/T6-tls-e2e

Commits on Jul 11, 2026

fix(lint): appease golangci-lint v2.12 findings on the TLS branch
xrl
committed
refactor(certificate)!: typed Config with issuerRef; drop ExtraConfig and AltNames
xrl
committed
feat(api)!: flatten TLSSurface into a provider-discriminated union
xrl
committed
feat(api): per-surface trustBundleConfigMapRef appended to trusted CAs
xrl
committed
feat(status): add TLSReady condition and TLS lifecycle events

xrl
and
claude
committed
docs(tls): clarify PeerCANotShared is conservative and ValidateTLS reason reuse

xrl
and
claude
committed
feat(status): warn on ClientCABroadTrust and fail on TrustBundleInvalid
xrl
committed
fix(rbac): grant events.k8s.io create/patch for the events/v1 recorder
xrl
committed
test(e2e): multi-member TLS quorum + PeerCANotShared

xrl
and
claude
committed
docs(tls): godoc the createIfAbsent e2e helper

xrl
and
claude
committed
test(e2e): assert the ClientCABroadTrust warning on the shared-CA quorum cluster
xrl
committed