Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Governance] Implement Custom TLS In Governance Module #2974

Closed
123liuziming opened this issue Dec 14, 2022 · 2 comments
Closed

[Governance] Implement Custom TLS In Governance Module #2974

123liuziming opened this issue Dec 14, 2022 · 2 comments

Comments

@123liuziming
Copy link
Collaborator

背景说明

在Istio中,服务之间的TLS有多种模式,除了mTLS之外,用户也可以通过DestinationRule来自己指定此服务的证书与私钥,我们可以对Istio下发的DestinationRule规则中的TLS相关配置进行读取,然后对feign,rest template等spring cloud客户端进行安全方面的增强

如何做

  1. 在istio-resource-transform中的RdsProtocol中解析TLS的相关配置
  2. 获取到相关的证书与秘钥后,使用此证书与秘钥配置feign,rest template的HTTPS客户端

Background

In Istio, there are multiple TLS modes in DestinationRule. In addition to mTLS, users can also specify the certificate and private key of this service through DestinationRule. We can read TLS related configurations in DestinationRule delivered by Istio. Then we enhance the security of spring cloud clients such as feign,rest template, etc

How to do

  1. Resolve TLS configurations in the RdsProtocol of istio-resource-transform module
  2. After obtaining the certificate and key, use the certificate and key to configure the HTTPS client for feign and rest template
@123liuziming 123liuziming changed the title [Governance] Implement TLS In Governance Module [Governance] Implement Custom TLS In Governance Module Dec 14, 2022
@github-actions
Copy link

This issue has been open 30 days with no activity. This will be closed in 7 days.

@github-actions github-actions bot added the stale label Aug 17, 2023
@github-actions
Copy link

This issue has been automatically marked as stale because it hasn't had any recent activity.If you think this should still be open, or the problem still persists, just pop a reply in the comments and one of the maintainers will (try!) to follow up. Thank you for your interest and contribution to the Sping Cloud Alibaba Community.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants