workloads / nomad-pack-registry

Nomad Pack Registry
https://github.com/workloads/nomad-pack-registry
2 stars 0 forks source link

harden Boundary Worker Pack with certificates from Vault CA #24

Open ksatirli opened 7 months ago

ksatirli commented 7 months ago

This issue is a result of @sofixa's comment in the boundary_worker Pack:

Might be worth mentioning that without TLS and with network_mode=host, anything on the host would be able to MITM/eavesdrop on the communications between the worker and the control plane, or making the defaults such as that it's hard (maybe an auto generated cert?)

Let's figure out a way how to inject certificates in a clean and reliable way, possible as pre-start tasks.