After #936, agents have client certificates available to them. We could use a proxy to create another way to access Cryostat's API for cluster-internal traffic. The proxy would be set up to authenticate using certificates, and allow access to only the endpoints required by the agent.
After #936, agents have client certificates available to them. We could use a proxy to create another way to access Cryostat's API for cluster-internal traffic. The proxy would be set up to authenticate using certificates, and allow access to only the endpoints required by the agent.