Skip to content

atunnel: broker actor JWTs through atelet - #708

Draft
Eitan Yarmush (EItanya) wants to merge 2 commits into
agent-substrate:mainfrom
kagent-dev:issue-706-atunnel-identity
Draft

atunnel: broker actor JWTs through atelet#708
Eitan Yarmush (EItanya) wants to merge 2 commits into
agent-substrate:mainfrom
kagent-dev:issue-706-atunnel-identity

Conversation

@EItanya

@EItanya Eitan Yarmush (EItanya) commented Aug 3, 2026

Copy link
Copy Markdown
Collaborator

Closes #706

Summary

  • broker actor JWTs from atelet over a same-node mTLS Unix socket
  • bind JWTs to the current actor assignment and worker Pod, with renewal before expiry
  • send the JWT on egress CONNECT and remove unauthenticated X-Ate-* identity headers

Testing

  • make verify
  • go test -race ./internal/atunnel
  • hack/run-e2e-kind.sh

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Broker actor JWTs from atelet to atunnel over an authenticated Unix socket

1 participant