Skip to content

http fulcio client#1176

Open
loosebazooka wants to merge 1 commit intomainfrom
fulcio-http
Open

http fulcio client#1176
loosebazooka wants to merge 1 commit intomainfrom
fulcio-http

Conversation

@loosebazooka
Copy link
Member

@loosebazooka loosebazooka commented Mar 4, 2026

Summary

Seem like private deployments don't want to expose the grpc endpoint, so provide the http client.

Release Note

Documentation

Signed-off-by: Appu Goundan <appu@google.com>
@loosebazooka loosebazooka marked this pull request as draft March 4, 2026 20:39
@loosebazooka loosebazooka marked this pull request as ready for review March 5, 2026 22:01
@loosebazooka loosebazooka requested review from aaronlew02 and vlsi March 5, 2026 22:01
Comment on lines +136 to +149
var resp = httpRequest.execute();
if (resp.getStatusCode() != 200) {
throw new CertificateException(
String.format(
Locale.ROOT,
"bad response from fulcio @ '%s' : %s",
endpoint,
resp.parseAsString()));
}
responseJson = resp.parseAsString();
} catch (IOException e) {
throw new CertificateException("Failed to request signing certificate from fulcio", e);
}

Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

execute() will return an HttpResponseException "when an error status code is detected in an HTTP response" (docs). We should either catch the HttpResponseException like here or disable the exception like here and here.

@aaronlew02
Copy link
Collaborator

This looks great, though I'm a bit concerned about duplication between the gRPC and HTTP client implementations as well as their tests. For the clients, WDYT about extracting common logic into a utility class or moving it into FulcioClient? For the tests, WDYT about parameterizing the original tests instead of creating new ones?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants