Zoe Zhao 9890219151 Added mTLS between ate system components (#237) ...

Part of [#170](https://github.com/agent-substrate/substrate/issues/170)
Establishes mutual TLS between all ate system components, and updates
the certificate plumbing it depends on.

Main changes:
1. The atenet router now verifies ate apiserver' serving certificate,
and presents its client cert to ate apiserver. Previously the connection
used `InsecureSkipVerify`.
2. AteApi server verifies atelet's serving cert.

Minor bug fixes:
1. Prevent `servicednssigner` from signing a cert with no DNS SANs. Also
updated valkey cluster's cert configuration, because it was relying on
the cert with empty DNS.

- [x] Tests pass
- [x] Appropriate changes to documentation are included in the PR

2026-07-24 15:43:03 -07:00

..

boilerplate

Fix boilerplate to single-space

2026-05-31 19:45:36 -07:00

microvm-assets

microvm: bump runtime assets to kata 4.0.0 + virtiofsd v1.14.0 (#506)

2026-07-23 18:45:08 -04:00

third_party/kubernetes

Update/verify dep vendoring (#132)

2026-06-02 20:02:51 -07:00

tools

build(deps): bump google.golang.org/grpc from 1.81.1 to 1.82.1 in /hack/tools/ko (#497)

2026-07-22 18:42:56 -04:00

update

Add {update/verify}/proto-fmt.sh via clang-format

2026-07-10 11:23:14 -04:00

util

Add initial threat model for substrate (#303)

2026-07-01 10:31:39 -07:00

verify

Add {update/verify}/proto-fmt.sh via clang-format

2026-07-10 11:23:14 -04:00

ate-dev-env.sh.example

Update default GKE cluster version and enable Managed OTel feature (#352)

2026-06-30 16:20:05 -07:00

create-kind-cluster.sh

hack,demos,docs: micro-VM asset tooling, base image, demo runner, docs

2026-06-25 13:44:25 -07:00

delete-kind-cluster.sh

Tidy up the messages when deleting a kind cluster (#165)

2026-06-04 15:45:27 -07:00

install-ate-kind.sh

Cleanup: use long-form names for shopts

2026-05-31 19:45:36 -07:00

install-ate.sh

Added mTLS between ate system components (#237)

2026-07-24 15:43:03 -07:00

install-demo-agent-secret.sh

delete actors in demo scripts

2026-06-25 16:51:46 -07:00

install-demo-claude-code-multiplex.sh

fix InvalidImageName in claude code multiplex demo

2026-07-08 16:42:11 -07:00

install-demo-counter.sh

Add basic per-actor external volume flow (#405)

2026-07-24 14:40:26 -07:00

install-demo-multi-template.sh

Avoid redundant object naming suffixes (#441)

2026-07-15 16:31:06 -07:00

install-demo-sandbox.sh

delete actors in demo scripts

2026-06-25 16:51:46 -07:00

kind.sh

…

protoc.sh

Remove trailing space from shell files

2026-05-31 19:45:36 -07:00

run-e2e-kind.sh

add e2e test script for kind, to avoid accidentally importing "real" cluster env

2026-06-05 18:12:50 -07:00

run-e2e.sh

Use pflag instead of Go's flag lib (#152)

2026-06-09 11:03:03 -07:00

run-microvm-demo-kind.sh

hack,demos,docs: micro-VM asset tooling, base image, demo runner, docs

2026-06-25 13:44:25 -07:00

run-microvm-demo.sh

Added mTLS between ate system components (#237)

2026-07-24 15:43:03 -07:00

run-root-tests.sh

Generalize rootful test execution via internal/roottest discovery (#507)

2026-07-23 18:39:39 -07:00

run-tool.sh

…

teardown.sh

Cleanup: use long-form names for shopts

2026-05-31 19:45:36 -07:00

update-all.sh

Update/verify dep vendoring (#132)

2026-06-02 20:02:51 -07:00

update-tool.sh

…

verify-all.sh

Update/verify dep vendoring (#132)

2026-06-02 20:02:51 -07:00