Skip to content

[EPIC] Add TLS certificates to all components #241

@fabriziosestito

Description

@fabriziosestito

To improve our system's security posture, we should ensure that all internal components communicate over encrypted channels using TLS and, where possible, enforce mutual TLS (mTLS) for identity verification.

We will use cert-manager to automate certificate management.

  • Configure mTLS for NATS to secure messaging between components (nodes, clients)
  • Enable TLS for the Storage API server extension to protect data access
  • Enable TLS for the controller’s webhook to ensure secure admission control

AC:

  • Components should be able to auto-reload certificates when the certs are refreshed without downtime.

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions