-
Notifications
You must be signed in to change notification settings - Fork 13
Open
Description
To improve our system's security posture, we should ensure that all internal components communicate over encrypted channels using TLS and, where possible, enforce mutual TLS (mTLS) for identity verification.
We will use cert-manager to automate certificate management.
- Configure mTLS for NATS to secure messaging between components (nodes, clients)
- Enable TLS for the Storage API server extension to protect data access
- Enable TLS for the controller’s webhook to ensure secure admission control
AC:
- Components should be able to auto-reload certificates when the certs are refreshed without downtime.