-
Notifications
You must be signed in to change notification settings - Fork 27
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
feat: allow using custom certificates for serving #128
Conversation
5262eb0
to
c70b6ec
Compare
@HumairAK FYI |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
we are fetching the ca-bundle from a configmap not a secret.
a small nit issue, let's name the key for the configmap either ca.crt or ca-bundle.crt or service-ca.crt instead of tls.crt not to confuse the user.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
lgtm
Corresponding eval PR instructlab/eval#163 |
911e0fa
to
c0342ec
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
lgtm
The model serving endpoint for the judge model does not always have verified certificates, sometimes they are self-signed. The communication will be encrypted but the certificate security chain won't be valid. Now we have a new `--judge-serving-model-ca-cert` flag that allows use to use custom certificates when interacting with the judge model serving endpoint. The secret that holds the judge model serving details can be amended with a new property: `JUDGE_CA_CERT: "cm-ca-cert"` to point to the ConfigMap that contains the custom certificates bundle. Signed-off-by: Sébastien Han <[email protected]>
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
feat: allow using custom certificates for serving (backport #128)
b6f70d4 feat: allow using custom certificates for serving
commit b6f70d4
Author: Sébastien Han [email protected]
Date: Tue Oct 29 11:51:59 2024 +0100