-
Feature Request
-
Resolution: Unresolved
-
Minor
-
None
-
openshift-4.16, openshift-4.17
-
False
-
None
-
False
-
Not Selected
-
-
-
1. Proposed title of this feature request
Automatically Mount CA-bundle trust certificates to each container
2. What is the nature and description of the request?
For each container that is being created there will be mounted CA certificates to the trust store, just as the openshift CA is mounted through the service account token.
3. Why does the customer need this? (List the business requirements here)
Each customer in restricted network has its own CA. Each application being created on the cluster needs to trust the root CA of the restricted network. Thus each cluster in restricted network has to deal with manually mounting root CA to to each container (or modifying each image by appending the certificate).
There is an option to add the CA to the nodes by modifying the proxy custom resource, but the applications still wont trust those CAs.
So adding option to append root CA certificate to each container will solve the problem.
4. List any affected packages or components.
Containers/pods
- is duplicated by
-
RFE-5359 Want Trust-Manager Operator to be included with Cert-Manager operator project in upcoming OpenShift versions.
- Backlog