hajiler ad4e65bc5f identity: Secure CSI Driver TCP Connections via Pod Identity (#956) ...

Secures network-based gRPC connections between the ate-api control plane
and CSI driver controller services using mutual TLS (mTLS) backed by
Substrate's Pod Identity.

  
Requests from ate-api to CSI driver controllers occur over the network,
as configured via the CSIDriverConfig custom resource. This PR extends
the CSIDriverConfig CRD to include a tls configuration section, which
leverages
Substrate's Pod Identity certificate infrastructure (managed by
podcertcontroller) to secure these
TCP connections using mTLS. Because standard CSI drivers typically
communicate over Unix domain sockets, a proxy sidecar (e.g., envoy) is
added to the CSI controller deployment to terminate TLS and forward
requests to the local CSI socket.


#232 

> It's a good idea to open an issue first for discussion.

- [X ] Tests pass
- [ ] Appropriate changes to documentation are included in the PR

2026-08-24 19:21:09 -07:00

..

csi-driver-host-path

identity: Secure CSI Driver TCP Connections via Pod Identity (#956)

2026-08-24 19:21:09 -07:00

csi-driver-nfs/deploy

Add e2e test for multi CSI volume actor

2026-08-07 18:20:22 +00:00

kubernetes

Update/verify dep vendoring (#132)

2026-06-02 20:02:51 -07:00