-
Notifications
You must be signed in to change notification settings - Fork 120
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
(feat): Enabled mTLS in ExtractorAgent, Fixes #989 #1010
Conversation
…rAgent 2. Changed code_path to be of type Path in agent.py
@Default2882 This requires some more work. Here are some more places where we call the client, we will have to use mTLS for those connections too -
|
…or agent.py and http_client.py
@diptanu Added the changes suggested by you. Please take a look and let me know. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@Default2882 This looks wonderful, I have one main comment for you. Do you want to test this end to end by configuring NGINX or some other reverse proxy infront of the server which does mTLS and try connecting the Executor and see if you can run the tests end to end ?
If you haven't done this before, here are some tutorials - https://medium.com/@mahernaija/how-to-configure-mutual-tls-mtls-for-nginx-736dec9f819d
https://dev.to/darshitpp/how-to-implement-two-way-ssl-with-nginx-2g39
https://gist.github.com/jeduardo/8a4c4465e87767c42ffcdc6b3e9e8396
Here's the step which I used for testing -
Couple of questions -
|
Add whatever debug code you want, and pip install . or poetry install to install the library locally and see your debug logs.
Yes, you are supposed to remove that and use https if we are setting certificates and such in the config.
We used to have web sockets back in the day, not anymore. You can remove web sockets related config from the executor.
See above
You can remove ssl context too, we were using it for websockets. |
Context
This change enables the agent to use mTLS by picking up the certificate and private key from
config_path
. This PR addresses issue #989What
Made minor changes in
ExtractorAgent
class inagent.py
to pickup the mTLS config fromconfig_path
and pass it toIndexifyClient
.Testing
Added 2 UTs -
ExtractorAgent
with mTLS config.Contribution Checklist
make fmt
inpython-sdk/
.make fmt
inserver/
.