As an alternative to mutual TLS authentication, perhaps the Cassandra nodes and AAI pods could be connected to each other via https://www.tinc-vpn.org/ ? It was suggested in another message: https://lists.onap.org/g/onap-discuss/message/13141
I guess it depends on the threat model and what kind of guarantee is being sought. Keong -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#14161): https://lists.onap.org/g/onap-discuss/message/14161 Mute This Topic: https://lists.onap.org/mt/28503357/21656 Group Owner: [email protected] Unsubscribe: https://lists.onap.org/g/onap-discuss/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
