Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add config information to router data model #2010

Open
plorenz opened this issue May 2, 2024 · 2 comments
Open

Add config information to router data model #2010

plorenz opened this issue May 2, 2024 · 2 comments
Assignees
Labels
distributed-control Work related to HA/Raft/other distributed control

Comments

@plorenz
Copy link
Member

plorenz commented May 2, 2024

  • Represent identity service configs in the persistence identity type, so we can easily grab them when they change. This also fixes a gap in auditing.
  • Add identity service configs to to the rdm
  • Add config types to the rdm
  • Add configs to the rdm
  • Add configs to services in the rdm
@plorenz plorenz self-assigned this May 2, 2024
@plorenz plorenz added the distributed-control Work related to HA/Raft/other distributed control label May 2, 2024
@qrkourier
Copy link
Member

I'm imagining this leads to a hypothetical where some routers do not require pre configuration with a YAML file (out of band config), favoring an in band configuration managed centrally via client or ctrl plane, kicked off by enrollment.

For example,

  1. Router finds client API via token issuer claim and verifies signature with server cert pubkey
  2. Router finds ctrl plane in enrollment response and saves in local endpoints file
  3. Router saves identity files in its working directory with default filenames, optionally configured by standard ziti env vars implemented in the create config subcommands

@plorenz
Copy link
Member Author

plorenz commented May 2, 2024

I'm imagining this leads to a hypothetical where some routers do not require pre configuration with a YAML file (out of band config), favoring an in band configuration managed centrally via client or ctrl plane, kicked off by enrollment.

For example,

1. Router finds client API via token issuer claim and verifies signature with server cert pubkey

2. Router finds ctrl plane in enrollment response and saves in local endpoints file

3. Router saves identity files in its working directory with default filenames, optionally configured by standard ziti env vars implemented in the create config subcommands

The config here is service configurations, not router configuration. There is a desire for controller-provided router configuration, but that's not being addressed here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
distributed-control Work related to HA/Raft/other distributed control
Projects
Status: In Progress
Development

No branches or pull requests

2 participants