Add a node "timestamp" (perhaps in the certnames table) that will behave like the other lifetime-related timestamps, i.e. the factsets/reports timestamps, and adjust the configure expiration command to affect it when the "expires" field includes "node". , i.e. {"certname": ... "expire": {"node": <boolean>} ...}. (Not sure yet whether configure expiration should initially allow more than one field in expires, i.e. "facts" and "node" -- not critical for now.) . The configure expiration command should behave like it does for facts, maybe reactivating the node, etc.
This ticket only needs to cover the schema/migration, command adjustment, and attendant docs (e.g. the configure expiration wire format, and possibly information about the new node timestamp). Related tickets will cover the remaining work. |
|
|