agent-substrate / agent-substrate/substrate

Point an actor's TLS client at the MITM trust bundle by default

未关闭
#1,424 4 条评论 0 个 reaction 已指派 1 人 已被 @haiyanmeng 认领 在 GitHub 查看
area/identity area/network kind/feature
主要语言
Go
星标
1.8k
派生
316
平均合并
2 天 43 分钟
30 天内合并 PR
287

描述

Currently, if MITM is enabled on a Substrate cluster, the users need to point the actor's TLS client at the MITM trust bundle by setting relative environment variables for every container in an ActorTemplate, see https://github.com/agent-substrate/substrate/blob/main/docs/egress-trust-bundle.md#point-the-runtime-at-it. This is tedious.

Should we by default inject a list of common environment variables into every container if MITM is enabled and offer users a way to opt-out this default behavior?

**Note:** currently, the users need to mount the MITM trust bundle [manually](https://github.com/agent-substrate/substrate/blob/main/docs/egress-trust-bundle.md#project-the-bundle). @thompsonmax is working on [auto-inject the egress trust volume into every actor](https://github.com/agent-substrate/substrate/pull/1252/#top).

@thompsonmax @ahmedtd @EItanya @bowei

贡献指南

打开贡献指南

评估

这个 Issue 还没有评估数据。

把新 issue 发到你的邮箱

精选适合新手参与的 GitHub issue 摘要。