Skip to content

adding mtls note to server 4.4 - 4.7 #9396

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 7 commits into from
May 21, 2025
Merged

adding mtls note to server 4.4 - 4.7 #9396

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
7 commits
Select commit Hold shift + click to select a range
df4b15c
adding mtls instructions
soulchips May 18, 2025
501e9b9
Merge branch 'master' into server-2239/add-mtls-instructions-to-every…
soulchips May 20, 2025
faf3513
Update jekyll/_cci2/server/v4.4/installation/hardening-your-cluster.adoc
soulchips May 20, 2025
a96a09d
Update jekyll/_cci2/server/v4.5/installation/hardening-your-cluster.adoc
soulchips May 20, 2025
d3cc8a6
Update jekyll/_cci2/server/v4.6/installation/hardening-your-cluster.adoc
soulchips May 20, 2025
748352c
Merge branch 'master' into server-2239/add-mtls-instructions-to-every…
soulchips May 20, 2025
e200de0
Merge branch 'master' into server-2239/add-mtls-instructions-to-every…
soulchips May 21, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 2 additions & 0 deletions jekyll/_cci2/server/v4.4/installation/hardening-your-cluster.adoc
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -27,6 +27,8 @@ NOTE: An nginx reverse proxy is placed in front of link:https://github.com/Kong/

CAUTION: When using Amazon Certificate Manager (ACM), the name of the nginx service will be `circleci-proxy-acm` instead of `circleci-proxy`. If you have switched from some other method of handling your TLS certificates to using ACM, this change will recreate the load balancer and you will have to reroute your associated DNS records for your `<domain>` and `app.<domain>`.

CAUTION: When using Nomad, clients and servers should be configured to use MTLS for secure communication.

[#network-traffic]
== Network traffic
This section explains the minimum requirements for a server installation to work. Depending on your workloads, you might need to add additional rules to egress for Nomad clients and VMs. As nomenclature between cloud providers differs, you will probably need to implement these rules using firewall rules and/or security groups.
Expand Down
2 changes: 2 additions & 0 deletions jekyll/_cci2/server/v4.5/installation/hardening-your-cluster.adoc
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -27,6 +27,8 @@ NOTE: An nginx reverse proxy is placed in front of link:https://github.com/Kong/

CAUTION: When using Amazon Certificate Manager (ACM), the name of the nginx service will be `circleci-proxy-acm` instead of `circleci-proxy`. If you have switched from some other method of handling your TLS certificates to using ACM, this change will recreate the load balancer and you will have to reroute your associated DNS records for your `<domain>` and `app.<domain>`.

CAUTION: When using Nomad, clients and servers should be configured to use MTLS for secure communication.

[#network-traffic]
== Network traffic
This section explains the minimum requirements for a server installation to work. Depending on your workloads, you might need to add additional rules to egress for Nomad clients and VMs. As nomenclature between cloud providers differs, you will probably need to implement these rules using firewall rules and/or security groups.
Expand Down
2 changes: 2 additions & 0 deletions jekyll/_cci2/server/v4.6/installation/hardening-your-cluster.adoc
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -26,6 +26,8 @@ NOTE: An nginx reverse proxy is placed in front of link:https://github.com/Kong/

CAUTION: When using Amazon Certificate Manager (ACM), the name of the nginx service will be `circleci-proxy-acm` instead of `circleci-proxy`. If you have switched from some other method of handling your TLS certificates to using ACM, this change will recreate the load balancer and you will have to reroute your associated DNS records for your `<domain>` and `app.<domain>`.

CAUTION: When using Nomad, clients and servers should be configured to use MTLS for secure communication.

[#network-traffic]
== Network traffic
This section explains the minimum requirements for a server installation to work. Depending on your workloads, you might need to add additional rules to egress for Nomad clients and VMs. As nomenclature between cloud providers differs, you will probably need to implement these rules using firewall rules and/or security groups.
Expand Down