generated from kubernetes/kubernetes-template-project
-
Notifications
You must be signed in to change notification settings - Fork 59
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Secure the ext-proc connect in epp #225
Milestone
Comments
I prefer yes, will you be able to help with it and submit something today or tomorrow? |
This was referenced Jan 28, 2025
@ahg-g I assigned myself this issue and added it to the v0.1 meta issue. |
Note that #222 is refactoring this section of the code. |
I think we can delay this until after the first release if it is not yet ready as we will not recommend deploying this in any production setting for now. |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Specifically the grpc server we create at
gateway-api-inference-extension/pkg/ext-proc/main.go
Line 219 in 1c49986
See example: https://github.com/GoogleCloudPlatform/service-extensions/blob/44fe708096efabadd3cb6fe30d6063a7f46fc9ea/callouts/go/extproc/internal/server/callout_server.go#L82
We can also create the certificate on the fly as we typically do for webhooks that we setup for CRDs, see example https://github.com/kubernetes-sigs/jobset/blob/c5f94e124d7bbf602baebc3ca3f4f25868f4791a/pkg/util/cert/cert.go#L51
The text was updated successfully, but these errors were encountered: