agent-substrate / agent-substrate/substrate
Point an actor's TLS client at the MITM trust bundle by default
- 主要语言
- Go
- 星标
- 1.8k
- 派生
- 316
- 平均合并
- 2 天 43 分钟
- 30 天内合并 PR
- 287
描述
Currently, if MITM is enabled on a Substrate cluster, the users need to point the actor's TLS client at the MITM trust bundle by setting relative environment variables for every container in an ActorTemplate, see https://github.com/agent-substrate/substrate/blob/main/docs/egress-trust-bundle.md#point-the-runtime-at-it. This is tedious.
Should we by default inject a list of common environment variables into every container if MITM is enabled and offer users a way to opt-out this default behavior?
**Note:** currently, the users need to mount the MITM trust bundle [manually](https://github.com/agent-substrate/substrate/blob/main/docs/egress-trust-bundle.md#project-the-bundle). @thompsonmax is working on [auto-inject the egress trust volume into every actor](https://github.com/agent-substrate/substrate/pull/1252/#top).
@thompsonmax @ahmedtd @EItanya @bowei
贡献指南
评估
这个 Issue 还没有评估数据。