agent-substrate / agent-substrate/substrate
Point an actor's TLS client at the MITM trust bundle by default
- Linguagem predominante
- Go
- Estrelas
- 1.8k
- Forks
- 316
- Merge médio
- 2d 43min
- PRs com merge (30d)
- 287
Descrição
Currently, if MITM is enabled on a Substrate cluster, the users need to point the actor's TLS client at the MITM trust bundle by setting relative environment variables for every container in an ActorTemplate, see https://github.com/agent-substrate/substrate/blob/main/docs/egress-trust-bundle.md#point-the-runtime-at-it. This is tedious.
Should we by default inject a list of common environment variables into every container if MITM is enabled and offer users a way to opt-out this default behavior?
**Note:** currently, the users need to mount the MITM trust bundle [manually](https://github.com/agent-substrate/substrate/blob/main/docs/egress-trust-bundle.md#project-the-bundle). @thompsonmax is working on [auto-inject the egress trust volume into every actor](https://github.com/agent-substrate/substrate/pull/1252/#top).
@thompsonmax @ahmedtd @EItanya @bowei
Guia de contribuição
Avaliação
Esta issue ainda não foi avaliada.