How atharva009/cert-reflex works
Cert-Reflex is a Spring Boot demo that continuously maintains short-lived TLS certificates for three HTTPS listeners. A user views the dashboard or injects a failure; the admin API reads inventory and events, while the scheduled watcher detects expiry or on-disk corruption. The remediator issues a replacement through the KMS-backed CA, installs it, reloads the live connector, and records state and events. The sampled source confirms these control and persistence boundaries; some bootstrap wiring and listener configuration are inferred only from documented paths.
Components 18
Dashboard API
- Dashboard
ui/src/App.jsx - Admin API
src/main/java/dev/atharva/certreflex/admin/AdminController.java - Failure Injector
src/main/java/dev/atharva/certreflex/admin/FailureInjector.java
Detection Remediation
- Watcher Job
src/main/java/dev/atharva/certreflex/watcher/CertWatcherJob.java - Disk Checker
src/main/java/dev/atharva/certreflex/watcher/OnDiskCertificateCheck.java - Certificate Remediator
src/main/java/dev/atharva/certreflex/remediator/CertRemediator.java - Lifecycle State
src/main/java/dev/atharva/certreflex/inventory/CertLifecycle.java
Certificate Issuance
- Certificate Issuer
src/main/java/dev/atharva/certreflex/issuer/CertificateIssuer.java - Certificate Authority
src/main/java/dev/atharva/certreflex/issuer/CertificateAuthority.java - Certificate Installer
src/main/java/dev/atharva/certreflex/demo/CertificateInstaller.java
Persistent State
- Certificate Inventory
src/main/java/dev/atharva/certreflex/inventory/CertRepository.java - Event Log Store
src/main/java/dev/atharva/certreflex/events/CertEventRepository.java
Listener Runtime
- Bootstrap Placeholders
src/main/java/dev/atharva/certreflex/bootstrap/PlaceholderCertificates.java - Demo Listeners
src/main/java/dev/atharva/certreflex/demo/DemoListeners.java - Demo Endpoint
src/main/java/dev/atharva/certreflex/demo/DemoController.java
Other components
- Operator
- LocalStack KMS
- Postgres
Connections 25
- Operator → Dashboard: views
- Dashboard → Admin API: polls
- Dashboard → Admin API: injects failures
- Admin API → Certificate Inventory: reads inventory
- Admin API → Event Log Store: reads events
- Admin API → Certificate Remediator: dispatches rotation
- Admin API → Failure Injector: dispatches injection
- Failure Injector → Certificate Inventory: backdates rows
- Watcher Job → Certificate Inventory: scans inventory
- Watcher Job → Disk Checker: checks files
- Watcher Job → Lifecycle State: marks findings
- Watcher Job → Certificate Remediator: dispatches remediation
- Certificate Remediator → Certificate Issuer: requests certificate
- Certificate Remediator → Certificate Installer: installs material
- Certificate Remediator → Lifecycle State: completes rotation
- Certificate Issuer → Certificate Authority: uses CA chain
- Certificate Authority → LocalStack KMS: signs digests
- Certificate Installer → Demo Listeners: reloads connectors
- Lifecycle State → Certificate Inventory: writes status
- Lifecycle State → Event Log Store: records events
- Certificate Inventory → Postgres: persists inventory
- Event Log Store → Postgres: persists events
- Bootstrap Placeholders → Demo Listeners: prepares files
- Operator → Demo Endpoint: tests HTTPS
- Demo Endpoint → Demo Listeners: reads live certificate