Skip to content

add mTLS for gateway & proxy communication #2726

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
wojcik91 merged 48 commits into from
Apr 21, 2026
Merged

add mTLS for gateway & proxy communication #2726

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
48 commits
Select commit Hold shift + click to select a range
b6192bc
add migration for core client certificates
wojcik91 Apr 14, 2026
9375e71
update existing structs for updated DB fields
wojcik91 Apr 14, 2026
482bdd0
add helpers for signing server/client certs
wojcik91 Apr 14, 2026
8885635
update query data
wojcik91 Apr 14, 2026
72a6569
generate and store core client certs during component setup
wojcik91 Apr 14, 2026
5dfbcc0
add helper for generating grpc server TLS config
wojcik91 Apr 14, 2026
7e78ab4
add core client identity to component connections
wojcik91 Apr 14, 2026
2fc96dc
update query data
wojcik91 Apr 15, 2026
f6a2b96
tokio::time cleanup
wojcik91 Apr 15, 2026
aef3978
update protos
wojcik91 Apr 15, 2026
564dc72
cleanup
wojcik91 Apr 15, 2026
9e1054e
add shared interceptor to check client cert serial
wojcik91 Apr 15, 2026
cb7231f
change interceptor signature
wojcik91 Apr 16, 2026
c12c46c
handle proxy handler shutdown during reconnect backoff
wojcik91 Apr 16, 2026
dfbf7a5
remove more paths
wojcik91 Apr 16, 2026
32101ef
review cleanup
wojcik91 Apr 16, 2026
cde7255
add more timeout constants
wojcik91 Apr 17, 2026
4f6c19b
reorganize setup integration tests to fix code sharing
wojcik91 Apr 17, 2026
164b1da
explicitly require client auth
wojcik91 Apr 17, 2026
710b1bf
update signature
wojcik91 Apr 17, 2026
3c76f4f
avoid leaking certs in logs
wojcik91 Apr 17, 2026
0641a89
adjust down migration
wojcik91 Apr 17, 2026
40eb0eb
used shared helper for setting up Edge connections
wojcik91 Apr 17, 2026
5d24cb5
limit setup token validity
wojcik91 Apr 17, 2026
3863968
verify CSR hostname during setup
wojcik91 Apr 17, 2026
1819db7
remove LDAP password from support dump
wojcik91 Apr 17, 2026
9ce3fa3
cleanup
wojcik91 Apr 17, 2026
5c67472
remove token from log message
wojcik91 Apr 17, 2026
18f9513
use query macros for validation
wojcik91 Apr 19, 2026
926ebd5
remove more magic values
wojcik91 Apr 19, 2026
86cf3fb
update docstring
wojcik91 Apr 19, 2026
5bb5e80
remove unnecessary dependency
wojcik91 Apr 20, 2026
4da3309
update dependencies
wojcik91 Apr 20, 2026
19004bb
Merge branch 'release/2.0' into mtls
wojcik91 Apr 20, 2026
0b04f47
post-merge fixes
wojcik91 Apr 20, 2026
ceb26ce
update deps
wojcik91 Apr 20, 2026
acc55c0
change postgres notifications to send just the object ID
wojcik91 Apr 20, 2026
cf331b9
avoid infinite update loops
wojcik91 Apr 20, 2026
880d4b2
update tests
wojcik91 Apr 20, 2026
57719ab
add docstring
wojcik91 Apr 21, 2026
4137066
Merge branch 'release/2.0' into mtls
wojcik91 Apr 21, 2026
90365e1
post-merge fixes
wojcik91 Apr 21, 2026
85adecf
update existing tests
wojcik91 Apr 21, 2026
fcdd334
update query data
wojcik91 Apr 21, 2026
2a68d50
fix naming
wojcik91 Apr 21, 2026
817dd48
update protos
wojcik91 Apr 21, 2026
9c6c317
remove unnecessary sleep
wojcik91 Apr 21, 2026
dbd3d40
review fixes
wojcik91 Apr 21, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
22 changes: 20 additions & 2 deletions .sqlx/query-27e7e18a7014af541fe5f8f051f78d61eebe6a79945324e98ca452b50d6abc90.json
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

22 changes: 20 additions & 2 deletions .sqlx/query-2ce93887379d80ff03753caaf94ec1ab4c6f0ead212fc74bb881e1d5c0d96080.json
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

9 changes: 6 additions & 3 deletions ...ce3100fe0ff1a86be48b7a22b58ef3da5bf1.json → ...afda3fb17e9b28034593b960dcb3856460c0.json
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

12 changes: 12 additions & 0 deletions .sqlx/query-304b0e9ef4c04cc998581114f043b3b3fccb2d956776dbb409d157cb53b2b8ac.json
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

22 changes: 20 additions & 2 deletions .sqlx/query-3c6a119f2f10046bd9e42314df953a0a0b3b44d0a87d43f69425729c15e1a400.json
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

12 changes: 12 additions & 0 deletions .sqlx/query-3f61241d9934c717b7c5f89047333d1c3f2b3a4f20a93089bad74a8d560b1843.json
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

22 changes: 20 additions & 2 deletions .sqlx/query-472e3903cf3df3c5938527c5584a5a53edc5b492a6bb12eac3d97f3ebc5f8506.json
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

54 changes: 27 additions & 27 deletions ...384fa989a4bfd58b3490d7b94f2547f261b1.json → ...be02cd4b54d4ec042f238c854637a6b101d0.json
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

22 changes: 20 additions & 2 deletions .sqlx/query-4d9c4562a138038ba054b5b83b646341ee18e24f0d32399e6ce2ebaedef64cea.json
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

Loading
Loading