21 lines
929 B
Markdown
21 lines
929 B
Markdown
|
# =============================================================================
|
||
|
|
# mTLS Configuration for Trading Platform
|
||
|
|
# =============================================================================
|
||
|
|
# This directory contains certificates and configuration for mutual TLS
|
||
|
|
# between services. In production, use cert-manager to automate this.
|
||
|
|
#
|
||
|
|
# Option 1: cert-manager (recommended for production)
|
||
|
|
# Option 2: Manual certificate management (for dev/testing)
|
||
|
|
#
|
||
|
|
# Certificate hierarchy:
|
||
|
|
# Root CA
|
||
|
|
# ├── Service CA (issues service-to-service certs)
|
||
|
|
# │ ├── execute-service cert
|
||
|
|
# │ ├── data-service cert
|
||
|
|
# │ ├── news-service cert
|
||
|
|
# │ ├── api-gateway cert
|
||
|
|
# │ └── dashboard cert
|
||
|
|
# └── Ingress CA (for external-facing TLS)
|
||
|
|
# └── api-gateway TLS cert (for HTTPS)
|
||
|
|
# =============================================================================
|