-
Feature Request
-
Resolution: Unresolved
-
Undefined
-
None
-
2.4
-
None
-
False
-
-
False
1.What is the nature and description of the request?
Currently it is not possible to configure custom TLS certs generated by external CA to the receptor through installer.
However, there is a supported way to handle this situation using below mentioned variables:
[all:vars]
mesh_ca_keyfile=/tmp/<mesh_CA>.key
mesh_ca_certfile=/tmp/<mesh_CA>.crt
Doc - https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.4/html-single/red_hat_ansible_automation_platform_automation_mesh_guide_for_vm-based_installations/index#importing-mesh-ca_setting-up
However,
In most of the cases, CA authority would never share their private key of CA, which is completely valid.
2. Why does the customer need this? (List the business requirements here)
Security reasons, security scanners detects that self-signed certs are configured for port 27199
3. How would you like to achieve this? (List the functional requirements here)
By having an option to configure custom TLS certs generated by external CA.