cryostatio / cryostat-operator

A Kubernetes Operator to facilitate the setup and management of Cryostat.
https://cryostat.io
Apache License 2.0
33 stars 19 forks source link

[Story] Allow agents to authenticate with Cryostat using certificates #952

Open ebaron opened 2 weeks ago

ebaron commented 2 weeks ago

After #936, agents have client certificates available to them. We could use a proxy to create another way to access Cryostat's API for cluster-internal traffic. The proxy would be set up to authenticate using certificates, and allow access to only the endpoints required by the agent.