apache / apache/openwhisk-deploy-kube
Secure control plane communication
- Dominant language
- Shell
- Stars
- 309
- Forks
- 231
- PR merge metrics
- No merged PRs in 30d
Description
Enable SSL for all control plane communication.
Two possible paths for doing this.
(1) rely on Istio support for mutual TLS between microservices.
(2) a more manual path where we have scripting to optionally generate the necessary certificates/keys, store them in Kubernetes secrets, and configure each individual micro-service accordingly.
Contributor guide
Research direction
The issue names no files, tests, or entry points. Start by deciding between Istio mutual TLS and manually generated certificates stored in Kubernetes secrets, then map the chosen approach across each control-plane microservice; done means all control-plane communication is secured and the deployment path is documented and verifiable.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- kubernetes, shell
- Domain
- infrastructure, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 20/100