Remote Resource Provisioning on Consumer Side during Transfer Initiation

[thomasrutger]

Hi, I'm working on a custom data plane where the consumer needs to issue and present a Certificate Signing Request (CSR) to the provider that then returns a signed certificate.

Currently, I’ve implemented a custom Provisioner that generates the CSR and attaches it to the dataDestination (via a ProvisionedDataDestinationResource). This works, but it couples the logic tightly with the control plane.

Is there a way to invoke an external service on the consumer side during transfer initiation to remotely provision resources like this, instead of handling it directly in the control plane?

I’m aware that I could offload CSR creation to the consumer client and pass it in the dataDestination of the TransferRequest, but I’d prefer not to put that burden on the consumer client.

I suspect this isn’t currently supported, but before moving forward with a custom solution, I wanted to double-check if there are existing mechanisms or alternative approaches I may have missed.

Thanks!

[ndr-brt]

Hey, yes, currently the provisioning is done by the control-plane, there's a refactoring in progress to move it in the data-plane:
#4793

It could take some time to have it completed

[thomasrutger]

This is indeed exactly what I was looking for!