feat: Control API uses automatic cross-pinning mTLS (Closes #119)
. kapow server generates on startup a pair of certificates that will use to secure communications to its control server. It will communicate the server and client certificates as well as the client private key to the init programs it launches, via environment variables. . kapow server now understands a new flag --control-reachable-addr which accepts either a IP address or a DNS name, that can be used to ensure that the generated server certificate will be appropiate in case the control server must be accessed from something other than localhost. Co-authored-by: Roberto Abdelkader Martínez Pérez <robertomartinezp@gmail.com>
This commit is contained in:
@@ -62,10 +62,9 @@ You can find the complete documentation and examples [here](https://kapow.readth
|
||||
|
||||
## Security
|
||||
|
||||
Please consider the following security caveats **before** using *Kapow!*
|
||||
|
||||
- [Issue #119](https://github.com/BBVA/kapow/issues/119)
|
||||
- [Security Concerns](https://kapow.readthedocs.io/en/stable/the_project/security.html#security-concerns)
|
||||
Please consider the following
|
||||
[Security Concerns](https://kapow.readthedocs.io/en/stable/the_project/security.html#security-concerns)
|
||||
**before** using *Kapow!*
|
||||
|
||||
If you are not 100% sure about what you are doing we recommend not using *Kapow!*
|
||||
|
||||
|
||||
Reference in New Issue
Block a user