-
Story
-
Resolution: Unresolved
-
Undefined
-
None
-
None
-
None
-
Product / Portfolio Work
-
False
-
-
False
-
None
-
None
-
None
-
NetObserv - Sprint 280
Set up TLS between agent and FLP
Note that mTLS cannot be configured through the openshift service annotations (Service CA operator https://github.com/openshift/service-ca-operator ), we we rely on at the moment.
To implement mTLS, an option would be to create our own signer & trust bubble, but that's out of scope for now (FTR: that's something https://github.com/openshift/library-go can help with, for instance etcd is doing something similar: https://github.com/openshift/cluster-etcd-operator/blob/3f2f972c990b132cd397034f2b17f55b913d7e48/pkg/operator/etcdcertsigner/etcdcertsignercontroller.go )