direct_tcp traded the proxy's 100 s cutoff for plain HTTP. Now a coderai
pod on that path brings its own TLS: a per-install CA (openssl, kept
beside the pod registry) signs a short-lived leaf per pod, sent as env
like the token; boot.sh and the venv-on-volume bootstrap start uvicorn
on it. This side verifies https-to-a-bare-IP against that CA only —
pod_http, a requests shim every pod-facing call now goes through. No
hostname check: the IP is unknown at issue time, and a foreign cert
fails the chain before a name is compared. Proven end to end in a test
with a real https server. vLLM/llama.cpp images stay plain on this path.
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0182DhR1eFNPQyGmDrpHbedY