Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat(kuma-cp) use dp server port instead of catalog #1092

Merged
merged 6 commits into from
Oct 26, 2020

Conversation

jakubdyszkiewicz
Copy link
Contributor

@jakubdyszkiewicz jakubdyszkiewicz commented Oct 19, 2020

Summary

Until now, DP requested a control plane on the API port for the catalog and then it used the bootstrap URL provided by CP to contact it again for the bootstrap configuration. This PR changes this behavior so we contact CP directly on DP Server port (the one for bootstrap, xds, sds etc.)

Motivation:

  • Separation of concerns. You may want to hide API server from the whole environment. Now it's possible
  • More secure. Since API has TLS off by default for now, we could not confirm the identity of the control plane. We can do it now.
  • Simplicity. One port for CP<->DP communication, the separate port for managing the control plane.

Compatibility

Although it is a breaking change on Universal when upgrade (a user needs to update --cp-address manually to the new port) because I kept catalog as a part of :5681/catalog, the old Dataplane will be able to connect to the new Control Plane.

Documentation

@jakubdyszkiewicz jakubdyszkiewicz requested a review from a team as a code owner October 19, 2020 12:44
pkg/config/app/kuma-dp/config.go Outdated Show resolved Hide resolved
Base automatically changed from chore/token-validation to master October 23, 2020 14:09
Signed-off-by: Jakub Dyszkiewicz <[email protected]>
Signed-off-by: Jakub Dyszkiewicz <[email protected]>
@jakubdyszkiewicz jakubdyszkiewicz force-pushed the feat/kuma-dp-drop-catalog branch from 3e49ff5 to 95fe6f4 Compare October 23, 2020 14:15
Signed-off-by: Jakub Dyszkiewicz <[email protected]>
Signed-off-by: Jakub Dyszkiewicz <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants