planetscale / planetscale/vitess-operator
vitess-operator doesn't support mTLS
Open
Nobody has claimed this yet.
- Dominant language
- Go
- Stars
- 372
- Forks
- 102
- Avg merge
- 3d 5h
- Merged PRs (30d)
- 15
Description
If you've configured mTLS on the various components (ie. provided --grpc_ca to vttablet in particular), vitess-operator will no longer be able to talk to it as vttablet will expect to receive a client certificate, which isn't an option in vitess-operator.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by tracing how the operator connects to vttablet over gRPC and where connection options are configured. Compare the existing server CA configuration with the required client certificate and key settings; done means the operator can communicate with vttablet when mTLS is enabled.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- go, grpc, kubernetes
- Domain
- infrastructure, security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100