A few of us here at Verizon Media have been working to ensure all services can support authenticating with mTLS certificate and key. We've had success with this, and if you've reviewed patches related to this, thank you!

There's still an outstanding patch for python-cinderclient that has not gotten attention. It has +1s from contributors across the community, but hasn't gotten any core review attention. It's a trivial change, adding support for mTLS certificate passing for server version requests. The bug is here: https://bugs.launchpad.net/python-cinderclient/+bug/1915996 and the code is here: https://review.opendev.org/c/openstack/python-cinderclient/+/776311. If there are any concerns about this change, please let us know on the gerrit change itself, or feel free to reach out to me on IRC (JayF in #openstack-ironic, among many others).

We have been successfully running this code downstream for a while, and hope to share the added mTLS love with the rest of the community.

Thanks,

Jay Faulkner