Change agent's ssl upload behavior according to the configuration
Open
Nobody has claimed this yet.
enhancement
- Dominant language
- Go
- Stars
- 371
- Forks
- 107
- Avg merge
- 1d 16h
- Merged PRs (30d)
- 37
Description
At present the agent uploads the ssl metadata to the controller, however a user may want to opt out of sending this sensitive information to the controller.
The agent can use the agent configuration flag: nginx-ssl-config to decide if the agent is allowed to send the ssl information.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start with sdk/agent/config/config_helpers.go and the nginx-ssl-config flag. Trace the agent path that uploads SSL metadata and verify its behavior for both allowed and opted-out configurations. Done means sensitive SSL metadata is not sent when the flag disables it, while existing uploads remain available when enabled.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- go, nginx
- Domain
- backend, security
- Issue type
- Feature
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100