Skip to content

Add mTLS support#3

Merged
stefanDeveloper merged 1 commit into
stefanDeveloper:mainfrom
KunoVonHagen:use-tls
Jun 2, 2026
Merged

Add mTLS support#3
stefanDeveloper merged 1 commit into
stefanDeveloper:mainfrom
KunoVonHagen:use-tls

Conversation

@KunoVonHagen
Copy link
Copy Markdown
Contributor

This pull request introduces comprehensive support for TLS (including mutual TLS) in the CI pipeline and the FluvioWriter plugin initialization. The main focus is to ensure secure communication when interacting with Fluvio by configuring and testing TLS parameters both in automated workflows and at runtime, while maintaining backward compatibility for non-TLS environments.

CI/CD and TLS Integration:

  • Added a new GitHub Actions workflow (.github/workflows/ci-tls.yml) that sets up a full end-to-end CI pipeline for testing the Zeek plugin with TLS/mTLS enabled Fluvio clusters. This includes generating certificates, starting a Fluvio cluster with TLS, and running integration tests.

Plugin Runtime TLS Configuration:

  • Updated FluvioWriter::DoInit in src/FluvioWriter.cc to dynamically detect TLS configuration from environment variables (FLUVIO_TLS_DOMAIN, FLUVIO_TLS_KEY, FLUVIO_TLS_CERT, FLUVIO_TLS_CA). If present, the plugin configures strict mTLS; otherwise, it falls back to a non-TLS connection, improving flexibility and security.
  • Modified Fluvio client initialization to use the new TLS-aware configuration, ensuring the plugin can securely connect to Fluvio clusters when required.

@stefanDeveloper stefanDeveloper self-requested a review June 2, 2026 12:34
@stefanDeveloper stefanDeveloper added the enhancement New feature or request label Jun 2, 2026
Copy link
Copy Markdown
Owner

@stefanDeveloper stefanDeveloper left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Finally tls :)

@stefanDeveloper stefanDeveloper merged commit 8321756 into stefanDeveloper:main Jun 2, 2026
2 checks passed
@stefanDeveloper
Copy link
Copy Markdown
Owner

fixed #1

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

enhancement New feature or request

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants