Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Allow http connection: mTls already secures traffic inside the Service Mesh #23763

Closed
hakan-77 opened this issue Oct 11, 2024 · 1 comment
Closed

Comments

@hakan-77
Copy link

Problem:

When Trino is not exposed to the outside world, and all traffic is inside a Kubernetes cluster and already encrypted via mTls, the necessity to use certificates is a MAJOR OVERKILL.

Service mesh systems do not add X-Forwarded-Proto http headers for mTls. So, Trino assumes the traffic is insecure, which is not true.

Suggested Solution:

Add a parameter that allows http traffic to Trino, similar to any other data/database platform on the market.

@hakan-77 hakan-77 changed the title Allow http connection: mTls already secures traffic inside the serice Mesh Allow http connection: mTls already secures traffic inside the Service Mesh Oct 11, 2024
@wendigo
Copy link
Contributor

wendigo commented Oct 12, 2024

Trino requires a direct communication between workers. Any intermediaries between them are unsupported.

@wendigo wendigo closed this as not planned Won't fix, can't repro, duplicate, stale Oct 12, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Development

No branches or pull requests

2 participants