Uploaded image for project: 'OpenShift Request For Enhancement'
  1. OpenShift Request For Enhancement
  2. RFE-4214

Capability to set a custom filename for the injected certs in automatic cacert injection

XMLWordPrintable

    • Icon: Feature Request Feature Request
    • Resolution: Done
    • Icon: Undefined Undefined
    • None
    • None
    • openshift-apiserver
    • None
    • False
    • None
    • False
    • Not Selected

      Problem Description:

      To set a custom filename for the injected certs.

      Use Case:

      The customer has multiple operators in use. To inject the CAcerts customer is using their described label to inject the certs. Several operators need the certificate to communicate with external services within the customer's internet network. All services in the customer's network have a certificate that was signed by their own authority. So the customer has to add the CAcerts to their trust stores. Most of the operators need the CABundle with a specific name and customer cannot change the mountpoint to influence that name by mounting it to the deployment. Customer only have the possibility in most of their cases to add a parameter to set the name of the related configmap to add the certs. In that special case, the customer needs a name like "custom-ca-bundle.pem".

      Kindly refer to the link mentioned below for more details :

      https://docs.kasten.io/latest/install/advanced.html#install-root-ca-in-k10-s-namespace

      It would be cool to get the possibility to change the filename somehow.

      The customer would prefer something like this:

      ~~~
      apiVersion: v1
      data:
      kind: ConfigMap
      metadata:
      labels:
      config.openshift.io/inject-trusted-cabundle: "true"
      config.openshift.io/inject-trusted-cabundle-name: "custom-ca-bundle.pem" <=This field needs to be added
      name: custom-ca-bundle
      namespace: myns
      ~~~

              wcabanba@redhat.com William Caban
              sasakshi@redhat.com Sakshi sakshi
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated:
                Resolved: