Enable mTLS to ensure that traffic is secure and trusted between the …

[alexwo]

…service manager and brokers with mTLS

Flows with mTLS

• Catalog fetcher [Fetch catalog]
• OSB calls [All]
• SM as a platform [create/update instance / binding]

Service broker entity

• Extended to store client certificates and keys

Interpret interface is implemented

• Support to decoding certs and keys from base64

DB migration

• Tear up and down SQL is added to add the tls_client key and certificate properties to brokers

Pull Request Template

Prerequisites

• If there is no issue related to your pull request - open one and assign yourself to it. If you're proposing a solution to an already opened issue - simply assign yourself to it.

Motivation

Describe the problem you're trying to solve or the feature you're proposing in addition to a link to the related issue.

Approach

How does this change address the problem?

Pull Request status

• [x] Initial implementation
• [ ] Refactoring
• [ ] Unit tests
• [ ] Integration tests

Feel free to construct the checklist with whatever items seem most reasonable for your change. You could disassemble the Implementation part to even smaller separate checklist items if you're working on something big for example. But do make the effort to provide a checklist of some sort so that the core team as well as the community can have an idea about the progress of your Pull Request.

Third-party code

If you use third party code with your contribution such as, components, libraries, or snippets make sure to mention that.

Make sure that your contribution complies with our Contribution guidelines.

Work in Progress label

For as long as development of your Pull Request is still ongoing you MUST label it with a wip label as well as prefix the name of the PR with [WIP].

For example: [WIP] Service brokers API

[CLAassistant]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you all sign our Contributor License Agreement before we can accept your contribution.
2 out of 3 committers have signed the CLA.

:white_check_mark: DanFrei
:white_check_mark: alexwo
:x: Daniel Friedman

---

Daniel Friedman seems not to be a GitHub user. You need a GitHub account to be able to sign the CLA. If you have already a GitHub account, please add the email address used for this commit to your account.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}

[coveralls]

Coverage decreased (-0.05%) to 86.87% when pulling 5ad5aa920055bcd861ada772413af6234fba5cdd on alexwo:mtls2 into 53f973582fbefeb7827627888e571b254f086036 on Peripli:master.

[alexwo]

we have prepared a new PR at: https://github.com/Peripli/service-manager/pull/465