opensource/coder
3
0
Fork 0
mirror of https://github.com/coder/coder.git synced 2026-09-24 15:04:27 +08:00
Code Issues Packages Projects Releases Wiki Activity

feat: NATS mTLS pubsub implementation (#26902)

Browse Source
This commit is contained in:
Callum Styan
2026-07-13 11:00:02 -07:00
committed by GitHub
parent 010d96c3cd
commit ad29777cb2
22 changed files with 1776 additions and 57 deletions
Download Patch File Download Diff File Expand all files Collapse all files
codersdk/deployment.go
+6
View File
@@ -5521,6 +5521,12 @@ const (
CryptoKeyFeatureWorkspaceAppsToken CryptoKeyFeature = "workspace_apps_token"
CryptoKeyFeatureOIDCConvert CryptoKeyFeature = "oidc_convert"
CryptoKeyFeatureTailnetResume CryptoKeyFeature = "tailnet_resume"
// CryptoKeyFeatureNATSCA is the CA that signs NATS cluster mTLS leaf
// certificates. Its secret is a PEM cert+key bundle (not a hex secret like
// the other features) and contains a private key, so it must never be
// served over the API. It is deliberately excluded from
// whitelistedCryptoKeyFeatures in enterprise/coderd/workspaceproxy.go.
CryptoKeyFeatureNATSCA CryptoKeyFeature = "nats_ca"
)
type CryptoKey struct {