-
Story
-
Resolution: Done
-
Undefined
-
None
-
None
-
Product / Portfolio Work
-
False
-
-
False
-
3
-
None
-
None
-
NetObserv - Sprint 280, NetObserv - Sprint 281
Set up TLS between agent and FLP
Note that mTLS cannot be configured through the openshift service annotations (Service CA operator https://github.com/openshift/service-ca-operator ), we we rely on at the moment.
To implement mTLS, an option would be to create our own signer & trust bubble, but that's out of scope for now (FTR: that's something https://github.com/openshift/library-go can help with, for instance etcd is doing something similar: https://github.com/openshift/cluster-etcd-operator/blob/3f2f972c990b132cd397034f2b17f55b913d7e48/pkg/operator/etcdcertsigner/etcdcertsignercontroller.go )
- links to
(7 links to)