Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Feature Request] Security plugin integration for grpc-transport plugin #16905

Open
finnegancarroll opened this issue Dec 23, 2024 · 0 comments
Labels
enhancement Enhancement or improvement to existing feature or request Plugins untriaged

Comments

@finnegancarroll
Copy link
Contributor

Is your feature request related to a problem? Please describe

Implement security features and integrate with OpenSearch security plugin for production readiness of experimental gRPC transport. It should be the case that security settings for existing http transport maps cleanly onto newly introduced grpc-transport, providing configurable TLS, AuthN, and AuthZ for this new transport implementation.

Describe the solution you'd like

Security Requirements

TLS/Certificate Management

  • Add and extend NetworkPlugin.SecureAuxTransport interface
  • Configure certificate loading from security plugin
  • Allow enable TLS on grpc-transport
  • Maintain separation of security settings between client/server transports

Authentication/Authorization

*Additional research needed here to determine the extent these are handled by the security plugin.

  • Provide framework for user authentication
  • Provide framework for enforcing role-based access control

Related component

Plugins

Describe alternatives you've considered

Leaving the grpc-transport as plaintext. TLS may not be useful for if users do not plan on making this endpoint public. Similarly AuthN/AuthZ is situational.

Additional context

No response

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement Enhancement or improvement to existing feature or request Plugins untriaged
Projects
Status: Todo
Development

No branches or pull requests

1 participant