sirius/gcloud-lab
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
gcloud-lab/trading-platform/deploy/mtls/README.md
Sirius Devops d079d1239f feat: add trading platform K8s deployment infrastructure 
- Add Helm chart with 19 templates (Deployments, Services, Ingress,
  ConfigMaps, Secrets, NetworkPolicy, cert-manager)
- Add Dockerfiles for 4 microservices (dashboard, data-service,
  execute-service, news-service)
- Add CI/CD workflows (build-test, build-push, deploy)
- Add raw K8s manifests, per-service Helm charts, and deploy scripts
- Add SOPS-encrypted secrets template and config
- Configure deployment to customer1 namespace
- Include infrastructure components: PostgreSQL, Redis, Kafka
2026-05-17 22:15:00 +00:00

929 B
Raw Blame History

=============================================================================

mTLS Configuration for Trading Platform

=============================================================================

This directory contains certificates and configuration for mutual TLS

between services. In production, use cert-manager to automate this.

Option 1: cert-manager (recommended for production)

Option 2: Manual certificate management (for dev/testing)

Certificate hierarchy:

Root CA

├── Service CA (issues service-to-service certs)

│ ├── execute-service cert

│ ├── data-service cert

│ ├── news-service cert

│ ├── api-gateway cert

│ └── dashboard cert

└── Ingress CA (for external-facing TLS)

└── api-gateway TLS cert (for HTTPS)

=============================================================================