First TLS instrumentation

charmcraft.yaml

@@ -15,3 +15,6 @@ parts:
     charm-binary-python-packages:
       - pydantic>2.0
 
+      # For v2.tls_certificates
+      - cryptography
+      - jsonschema

lib/charms/mimir_coordinator_k8s/v0/mimir_cluster.py

@@ -24,10 +24,14 @@
 DEFAULT_ENDPOINT_NAME = "mimir-cluster"
 
 LIBAPI = 0
-LIBPATCH = 2
+LIBPATCH = 3
 
 BUILTIN_JUJU_KEYS = {"ingress-address", "private-address", "egress-subnets"}
 
+MIMIR_CONFIG_FILE = "/etc/mimir/mimir-config.yaml"
+MIMIR_CERT_FILE = "/etc/mimir/server.cert"
+MIMIR_KEY_FILE = "/etc/mimir/private.key"
+MIMIR_CLIENT_CA_FILE = "/etc/mimir/ca.cert"
 
 class MimirClusterError(Exception):
     """Base class for exceptions raised by this module."""
@@ -273,7 +277,7 @@ def gather_addresses(self) -> Set[str]:
         addresses_by_role = self.gather_addresses_by_role()
         for role, address_set in addresses_by_role.items():
             data.update(address_set)
-        
+
         return data
 
 
@@ -417,3 +421,8 @@ def get_mimir_config(self) -> Dict[str, Any]:
                 log.error(f"invalid databag contents: {e}")
                 return {}
         return data
+
+    def get_cert_secret_ids(self) -> Optional[str]:
+        """Fetch certificates secrets ids for the mimir config."""
+        if self.relation and self.relation.app:
+                return self.relation.data[self.relation.app].get("secrets", None)