Aaron Son b22fbf11f2 go/libraries/doltcore/sqle/cluster: Add JWT authentication for peer communication to cluster replicas. ...

A remotesapi server running on a cluster replica publishes a JWKS.

Every outbound GRPC call the cluster replica makes includes a JWT signed with a
private key.

remotesapi servers running on cluster replicas require and validate incoming
JWTs for cluster traffic. The set of valid signing keys is taken from the
JWKSes which are published at /.well-known/jwks.json on the standby replica
hosts.

It is possible to configure tls_ca on cluster remotesapi to configure the set
of trusted roots for outbound TLS connections. Because the JWKSes are served
over the same connection, and becuase signed JWTs are not replay resistent, TLS
is recommended for all deployment topologies.

2022-11-10 09:26:38 -08:00

..

sql-server-cluster-tls.yaml

go/libraries/doltcore/sqle/cluster: Add the ability to configure SAN assertions on URIs and DNS names in the server certificate when configuring TLS.

2022-10-28 10:31:14 -07:00

sql-server-cluster.yaml

go/libraries/doltcore/sqle/cluster: Add JWT authentication for peer communication to cluster replicas.

2022-11-10 09:26:38 -08:00

sql-server-config.yaml

integration-tests/go-sql-server-driver: Make a new connection pool per connection assertion, instead of trying to reuse them.

2022-10-03 15:26:48 -07:00

sql-server-jwt-auth.yaml

go/libraries/doltcore/sqle/cluster: Add the ability to generate a keypair, serve a JWKS, and sign outbound RPCs with a JWT.

2022-11-02 09:54:09 -07:00

sql-server-orig.yaml

integration-tests/bats/sql-server.bats: Move the temporary table session specific test to go-sql-server-driver.

2022-10-27 09:43:29 -07:00

sql-server-tls.yaml

go/libraries/doltcore/sqle/cluster: Add the ability to configure SAN assertions on URIs and DNS names in the server certificate when configuring TLS.

2022-10-28 10:31:14 -07:00