Uploaded image for project: 'OpenShift Request For Enhancement'
  1. OpenShift Request For Enhancement
  2. RFE-2723

Automatically Mount CA-bundle trust certificates to each container

XMLWordPrintable

    • False
    • None
    • False
    • Not Selected

      1. Proposed title of this feature request

      Automatically Mount CA-bundle trust certificates to each container

      2. What is the nature and description of the request?

      For each container that is being created there will be mounted CA certificates to the trust store, just as the openshift CA is mounted through the service account token.

      3. Why does the customer need this? (List the business requirements here)

      Each customer in restricted network has its own CA. Each application being created on the cluster needs to trust the root CA of the restricted network. Thus each cluster in restricted network has to deal with manually mounting root CA to to each container (or modifying each image by appending the certificate).

      There is an option to add the CA to the nodes by modifying the proxy custom resource, but the applications still wont trust those CAs.

      So adding option to append root CA certificate to each container will solve the problem.

      4. List any affected packages or components.

      Containers/pods

              rh-ee-npng Nick Png
              rhn-support-dpateriy Divyam Pateriya
              Votes:
              8 Vote for this issue
              Watchers:
              14 Start watching this issue

                Created:
                Updated: