-
Spike
-
Resolution: Unresolved
-
Normal
-
openshift-4.15
-
None
-
BU Product Work
-
5
-
True
-
Blocked by https://issues.redhat.com/browse/NE-1479
-
False
-
OCPSTRAT-431 - Add support of custom PKI to Ingress Operator
-
-
-
CFE Sprint 244, CFE Sprint 245, CFE Sprint 246, CFE Sprint 247
- Create enhancement proposal with below design proposal
- Create a new ConfigMap with the ServiceCA and AdminCA(/EnterpriseCA) combined CA trust bundle, which will be made accessible as a file for Ingress Controller.
- FSNotifier will be used for monitoring the changes to the file and HAProxy configurations will be reloaded.
- IngressController will have a watcher on ServiceCA and AdminCA(/EnterpriseCA) and update the new ConfigMap trust bundle.