Comment on Ask HN: How do you approach service-to-service authentication?parentComments−posix_monadOP2yYes, this is a reasonable approach, but how are certificates deployed and managed?How do we deploy a list of certificates that a service should accept?How do we do certificate rotation and revocation?−soloist112yYou can use a configuration management tool but you can also just have a bundled archive that is deployed and extracted with SSH. Here's one example: https://community.chef.io/tools/chef-habitat
Comments
Yes, this is a reasonable approach, but how are certificates deployed and managed?
How do we deploy a list of certificates that a service should accept?
How do we do certificate rotation and revocation?
You can use a configuration management tool but you can also just have a bundled archive that is deployed and extracted with SSH. Here's one example: https://community.chef.io/tools/chef-habitat