agent-substrate / agent-substrate/substrate

Point an actor's TLS client at the MITM trust bundle by default

Aperta
#1,424 4 commenti 0 reazioni 1 assegnatario Rivendicata da @haiyanmeng Vedi su GitHub
area/identity area/network kind/feature
Lingua principale
Go
Stelle
1.8k
Fork
316
Merge medio
2g 43m
PR unite (30g)
287

Descrizione

Currently, if MITM is enabled on a Substrate cluster, the users need to point the actor's TLS client at the MITM trust bundle by setting relative environment variables for every container in an ActorTemplate, see https://github.com/agent-substrate/substrate/blob/main/docs/egress-trust-bundle.md#point-the-runtime-at-it. This is tedious.

Should we by default inject a list of common environment variables into every container if MITM is enabled and offer users a way to opt-out this default behavior?

**Note:** currently, the users need to mount the MITM trust bundle [manually](https://github.com/agent-substrate/substrate/blob/main/docs/egress-trust-bundle.md#project-the-bundle). @thompsonmax is working on [auto-inject the egress trust volume into every actor](https://github.com/agent-substrate/substrate/pull/1252/#top).

@thompsonmax @ahmedtd @EItanya @bowei

Guida per i contributori

Apri la guida per i contributori

Valutazione

Questa issue non è ancora stata valutata.

Ricevi le nuove issue nella tua casella

Un breve riepilogo di issue GitHub adatte ai principianti.