Skip to content

SSL/TLS encryption everywhere

Context

BuildGrid currently expose an insecure/unencrypted end-point. SSL/TLS encryption should be supported for any gRPC communications.

Task Description

  • Add relevant CLI options for client/server certificate and private key where it make sense.
  • Have sensible default search paths for these files if CLI options are not specified.
  • Keep around an --allow-insecure option on server-side.
  • Encrypt gRPC communications.
Edited by Martin Blanchard