Skip to content

Support Consul Connect Native integration #643

Open
@Walliee

Description

@Walliee

Is your feature request related to a problem? Please describe.
While it's possible to configure Spring application with a sidecar proxy to use Consul Connect today, it would nice to have native support using spring-cloud-consul.

Describe the solution you'd like
Consul Connect has three components:

  • Service Discovery (support for this already exists in spring-cloud-consul)
  • mTLS
  • Authorization

In order to support Consul Connect Native App integration, changes need to be client and server-side:

  • Consul connect enabled clients need to be configured such on outbound connections they provide service certificate as the client certificate and verify the remote certificate against the public CA roots.
  • Consul connect enabled servers need to be configured such that on inbound connections they verify the client certificate against the public CA roots and verify if the connection is authorized.

Additional context
https://www.consul.io/docs/connect/native
https://www.consul.io/api-docs/agent/connect#connect-agent-http-api

I've already created an issue on the consul-api project to add Connect API support. Ecwid/consul-api#207

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions