Skip to content

Update cloud_controller_ng for mTLS app-to-app routing (RFC draft)#625

Draft
rkoster wants to merge 2 commits intodevelopfrom
feature/app-to-app-mtls-routing
Draft

Update cloud_controller_ng for mTLS app-to-app routing (RFC draft)#625
rkoster wants to merge 2 commits intodevelopfrom
feature/app-to-app-mtls-routing

Conversation

@rkoster
Copy link

@rkoster rkoster commented Mar 5, 2026

Summary

Updates cloud_controller_ng submodule to include mTLS app-to-app routing support.

Note: This PR is a draft because the RFC for App-to-App mTLS Routing has not been approved yet.

Changes

Updates src/cloud_controller_ng submodule to branch feature/app-to-app-mtls-routing which adds:

  • RFC-0027 compliant mTLS authorization options for routes
  • Flat option format: mtls_allowed_apps, mtls_allowed_spaces, mtls_allowed_orgs, mtls_allow_any
  • GUID validation and mutual exclusivity enforcement
  • Feature flag gating via app_to_app_mtls_routing

Related PRs

rkoster added 2 commits March 5, 2026 10:01
Points to feature/app-to-app-mtls-routing branch which includes:
- mtls_allowed_sources route option for authorization
- GUID existence validation for apps, spaces, and orgs
- Mutual exclusivity enforcement for 'any' vs specific GUIDs
- Feature flag gating via app_to_app_mtls_routing
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant