feat(server)!: harden gateway peer transport and expand HA conformance - #3825

Open

EmilienM wants to merge 7 commits into

NVIDIA:mainfrom

EmilienM:feat/3529-ha-peer-transport/EmilienM

Commits on Sep 29, 2026

feat(server)!: require TLS and a pinned CA for gateway peer transport
EmilienM
committed
40fcda3
feat(server): fail fast on locally refused peer relays
EmilienM
committed
75bab29
test(server): cover receiver-side peer identity mismatches
EmilienM
committed
086c875
feat(helm)!: refuse plaintext PostgreSQL gateways and always pin the peer CA
EmilienM
committed
bbcf267
test(e2e): cover HA operations through non-owner gateway replicas
EmilienM
committed
fbaadcc
ci(e2e): run HA operations with HTTPS gateway peers
EmilienM
committed
7492aed
docs: document the gateway peer transport contract and HA operations
EmilienM
committed
921abb6