emissary
emissary copied to clipboard
Feature Request - TLS Support for TracingService
Please describe your use case / problem. Our organization has a strict compliance requirement that mandate all end-to-end communications with services to be conducted over HTTPS. Presently, we utilize cluster-wide OTLP collectors exposing trace endpoints over TLS. However, there is currently no way to customize TracingService for exporting traces using TLS.
Describe the solution you'd like An additional field under TracingService that supports TLS. Something similar to
tls:
ca_file: /some/path/trusted-ca.crt
cert_file: /some/path/tls.crt
key_file: /some/path/tls.key
service:
driver:
config:
custom_tags:
tag_headers:
propagation_modes:
Describe alternatives you've considered Haven't been able to come up with anything unfortunately. Putting a proxy to handle the TLS negotiation wouldn't be a viable alternative since we require E2E TLS.
Hello, can we please get some traction on this so we can remain TLS compliant within our organization?