peer-api-server
handling-api-server
user
peer-api-server
handling-api-server
user
* 1. GET batch/v1/jobs*
2a.1. handle request locally
2b.1. Proxy request to a peer that
serves `batch/v1/jobs`
2b.2. handling-api-server opens a
connection to a peer-api-server using
--proxy-client-cert and
--proxy-client-key
to secure the channel
2b.3. handling-api-server verifies
serving certs of
peer-api-server by verifying them
against --peer-ca-file
2b.4. peer-apiserver uses
Requestheader authn to verify
proxy-client-cert used in step 2b.2.
by verifying them against
--requestheader-client-ca-file
2b.5. data
alt
[2a. resource is serverd by handling-api-server]
[2b. resource is NOT served by handling-api-server]
3. data
​
​
​
​
​
​