clusterlink-net / clusterlink

A Gateway for connecting application services in different domains, networks, and cloud infrastructures
https://clusterlink.net
Other
17 stars 18 forks source link

controlplane: Store JWK keys in k8s secret #654

Closed orozery closed 3 months ago

orozery commented 3 months ago

Today, the JWK is initialized by the controlplane when loading, and stored in-memory. To support multiple controlpanes with the same JWK key, we change the controlplane authz manager to ready the JWK key from a secret, instead of generating it.manager The secret is created by the (soon to be leader elected) control manager.

Note: rotating JWK keys is not yet supported. Planning to open a feature issue after this PR is merged.