Skip to content

Add Cadence Internal TLS feature #36

@CosminL-DEV

Description

@CosminL-DEV

Enhancement to support internal TLS communication between cadence-server pods and cadence-web to frontend.

Something like this added to the schema and configurable in values.yaml.

services:
  frontend:
    rpc:
      tls:
        enabled: true
        certFile: config/credentials/keytest.crt
        keyFile: config/credentials/keytest
        caFiles:
          - config/credentials/client.crt
        requireClientAuth: true

  matching:
    rpc:
      tls:
        enabled: true
        certFile: config/credentials/keytest.crt
        keyFile: config/credentials/keytest

  history:
    rpc:
      tls:
        enabled: true
        certFile: config/credentials/keytest.crt
        keyFile: config/credentials/keytest

clusterGroupMetadata:
  clusterGroup:
    cluster0:
      tls:
        enabled: true

Reference: https://github.com/cadence-workflow/cadence/blob/master/config/development_tls.yaml

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions