Skip to content

feat(mtls): add mtls support for external LB

Sylvester Chin requested to merge sc1-mtls-poc into main

What

This MR adds mtls support for the external load balancer. This is a beta feature defined in the v1+dev Runway manifest schema included in this MR.

For testing, we are using the user-provided CA method (https://cloud.google.com/load-balancing/docs/https/setting-up-mtls-ccm).

root and int certs will be placed in the vault path env/staging/service/schin1-ai-assist-1579xx/trust_anchor_pem and env/staging/service/schin1-ai-assist-1579xx/intermediate_cas_pem for testing.

Why

For mtls support: team#118

Primarily for poc: team#244 (comment 1935853155)

Edited by Gonzalo Servat

Merge request reports