Secure communication between UCP and resource providers

[ytimocin]

Area for Improvement

We need to secure communication between UCP and the resource providers we have: Deployment Engine, Applications RP, and Dynamic RP.

As of now (24 Nov 2024), we do not have an authentication mechanism for communication between UCP and the resource providers.

Tasks of this issue:

• Research authentication mechanisms and propose one for our case (e.g., mTLS).
• Prepare a design document and present it in one of the design meetings.
• Implement the changes.
• Create/Update unit and functional tests.

Observed behavior

No authentication between UCP and resource providers.

Desired behavior

An authentication mechanism between UCP and resource providers.

Proposed Fix

This is an improvement that needs to be discussed in one of the design discussions.

rad Version

edge

Operating system

No response

Additional context

No response

Would you like to support us?

• Yes, I would like to support you

AB#13746

[radius-triage-bot]

👋 @ytimocin Thanks for filing this issue.

A project maintainer will review this issue and get back to you soon.

We also welcome community contributions! If you would like to pick this item up sooner and submit a pull request, please visit our contribution guidelines and assign this to yourself by commenting "/assign" on this issue.

For more information on our triage process please visit our triage overview

[radius-triage-bot]

👍 We've reviewed this issue and have agreed to add it to our backlog. Please subscribe to this issue for notifications, we'll provide updates when we pick it up.

We also welcome community contributions! If you would like to pick this item up sooner and submit a pull request, please visit our contribution guidelines and assign this to yourself by commenting "/assign" on this issue.

For more information on our triage process please visit our triage overview