Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support Consul Connect Native integration #643

Open
Walliee opened this issue Jun 4, 2020 · 4 comments
Open

Support Consul Connect Native integration #643

Walliee opened this issue Jun 4, 2020 · 4 comments

Comments

@Walliee
Copy link

Walliee commented Jun 4, 2020

Is your feature request related to a problem? Please describe.
While it's possible to configure Spring application with a sidecar proxy to use Consul Connect today, it would nice to have native support using spring-cloud-consul.

Describe the solution you'd like
Consul Connect has three components:

  • Service Discovery (support for this already exists in spring-cloud-consul)
  • mTLS
  • Authorization

In order to support Consul Connect Native App integration, changes need to be client and server-side:

  • Consul connect enabled clients need to be configured such on outbound connections they provide service certificate as the client certificate and verify the remote certificate against the public CA roots.
  • Consul connect enabled servers need to be configured such that on inbound connections they verify the client certificate against the public CA roots and verify if the connection is authorized.

Additional context
https://www.consul.io/docs/connect/native
https://www.consul.io/api-docs/agent/connect#connect-agent-http-api

I've already created an issue on the consul-api project to add Connect API support. Ecwid/consul-api#207

@spencergibb
Copy link
Member

I've wanted to write this very issue before!

@hadrabap
Copy link

I did the implementation of Agent-local operations. Could you please take a look?

Ecwid/consul-api#225

@spencergibb
Copy link
Member

@hadrabap I have no control over the consul-api project.

@hadrabap
Copy link

@spencergibb Sure, me neither. ;-) I just wanted feedback if the feature satisfies your needs (API) or if additional work should be done.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

4 participants