New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[TT-11672] Update description of CertificatesConfig.Upstream #6169
base: master
Are you sure you want to change the base?
Conversation
API Changes --- prev.txt 2024-03-20 13:19:39.598276933 +0000
+++ current.txt 2024-03-20 13:19:36.710283116 +0000
@@ -4762,7 +4762,9 @@
type CertificatesConfig struct {
API []string `json:"apis"`
- // Specify upstream mutual TLS certificates at a global level in the following format: `{ "<host>": "<cert>" }``
+ // Specify upstream mutual TLS certificates at a global level as a map of domain -> certificate id or path
+ // In tyk.conf, this would be `"security": {"certificates": {"upstream": {"*": "/certs/default.pem", "example.com": "ab23ef123"}}},`; as an environmental variable it would be
+ // `*:/certs/default.pem,example.com:ab23ef123`.
Upstream map[string]string `json:"upstream"`
// Certificates used for Control API Mutual TLS
ControlAPI []string `json:"control_api"` |
PR Description updated to latest commit (1ace166) |
PR Review
Code feedback:
✨ Review tool usage guide:Overview:
With a configuration file, use the following template:
See the review usage page for a comprehensive guide on using this tool. |
PR Code Suggestions
✨ Improve tool usage guide:Overview:
With a configuration file, use the following template:
See the improve usage page for a more comprehensive guide on using this tool. |
Please retry analysis of this Pull-Request directly on SonarCloud |
@dcs3spp Is there anything you need me to do to move this along, or is it still waiting for reviews? |
User description
Description
The tyk-docs repository has had a PR raised that proposes a config description update for CertificatesConfig.Upstream within the autogenerated Gateway config file from source. This PR has been created on behalf of @matthewdickinson with proposed change for review. Once reviewed and if approved, the fix would need to be synced into docs repository.
Related Issue
Motivation and Context
How This Has Been Tested
Screenshots (if appropriate)
Types of changes
Checklist
Type
documentation
Description
CertificatesConfig.Upstream
documentation inconfig/config.go
to improve clarity on how to specify upstream mutual TLS certificates globally. This includes a more detailed description and examples for bothtyk.conf
and environmental variable configurations.Changes walkthrough
config.go
Update Documentation for Upstream Mutual TLS Certificates
Configuration
config/config.go
CertificatesConfig.Upstream
to clarify theformat and usage of upstream mutual TLS certificates.
CertificatesConfig.Upstream
intyk.conf
and as an environmental variable.