Skip to content

Secure connection between agent and control plane #2843

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
mpstefan opened this issue Nov 27, 2024 · 0 comments
Closed

Secure connection between agent and control plane #2843

mpstefan opened this issue Nov 27, 2024 · 0 comments
Assignees
@sjberman
Labels
enhancement New feature or request refined Requirements are refined and the issue is ready to be implemented. size/large Estimated to be completed within two weeks
Milestone
v2.0.0

Comments

@mpstefan
Copy link
Member

mpstefan commented Nov 27, 2024 •
edited by sjberman
Loading

As a user of NGF
I want the connection between the control and data plane to be secured with TLS
So that any changes to the data plane are encrypted.

Acceptance

  • Any traffic between the control plane and Agent is encrypted.
    • By default, NGF can provide self-signed certs that are generated at installation time.
    • Docs should recommend that a customer use cert-manager in a production environment (with details on how to set this up).
  • The agent should use a Bound Kubernetes ServiceAccount token to authenticate with the control plane.

Dev Notes
@mpstefan mpstefan mentioned this issue Nov 27, 2024
Open
27 tasks
@mpstefan mpstefan added this to the v1.6.0 milestone Nov 27, 2024
@mpstefan mpstefan added the enhancement New feature or request label Nov 27, 2024
@mpstefan mpstefan modified the milestones: v1.6.0, v2.0.0 Jan 6, 2025
@sjberman sjberman added the blocked Blocked by other issue label Jan 8, 2025
@sjberman sjberman added refined Requirements are refined and the issue is ready to be implemented. size/large Estimated to be completed within two weeks labels Jan 27, 2025
@sjberman sjberman removed the blocked Blocked by other issue label Mar 6, 2025
@sjberman sjberman self-assigned this Mar 6, 2025
@sjberman sjberman moved this from 🆕 New to 🏗 In Progress in NGINX Gateway Fabric Mar 6, 2025
@sjberman sjberman mentioned this issue Mar 18, 2025
Merged
6 tasks
@sjberman sjberman moved this from 🏗 In Progress to 👀 In Review in NGINX Gateway Fabric Mar 18, 2025
@sjberman sjberman moved this from 👀 In Review to ✅ Done in NGINX Gateway Fabric Mar 24, 2025
@sjberman sjberman closed this as completed by moving to ✅ Done in NGINX Gateway Fabric Mar 24, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@sjberman sjberman

Labels
enhancement New feature or request refined Requirements are refined and the issue is ready to be implemented. size/large Estimated to be completed within two weeks
Projects
NGINX Gateway Fabric
Status: ✅ Done
Milestone
v2.0.0
Development

No branches or pull requests
2 participants
@mpstefan @sjberman