[Feature]: Update Brokers to use NKeys
Closed this issue · 1 comments
xadhatter commented
What are you trying to achieve?
Secure, policy based access to NATS.
What would you like to see in the product?
Currently a Broker uses TLS certs generated during Helm Chart install to authenticate with NATS. There is no authorization in place. At start-up a Broker should bootstrap itself by sending a request to the Platform Server. The Platform Server in turn generates an NKey with the appropriate policies for that Broker using Vault and returns it to the Broker. The NKeys are then used by the Broker to connect to NATS.
Give us an idea of the benefit to you and others should we fulfill the request
Security.
Version
v0.1.0-alpha
Code of Conduct
- I agree to follow XigXog's Code of Conduct
depends-on: #2
xadhatter commented
Switch from sidecar to daemon set simplified NATS access. Using mTLS is sufficient. Closing ticket.