Description:

Goal Summary:

In RHACS, Operator does not allow users to download the private key used in the init bundle file. Theres a risk especially in large cluster estates where the risk of private key compromise increases. Allowing the download of the private key will give us the  better management and security.

Goals and expected user outcomes:

• Users will be able to download the private key from the init bundle file directly through the RHACS.
• It is expected that a secure cluster can join RHACS by accessing an RHACS endpoint directly, without having to exchange the init bundle.
• Any auto rotation performed by the operator should also be considered compromised if the previous key is considered compromised and a manual rotation should be performed. Is this possible?

Acceptance Criteria:

• Users can successfully download the private key from the init bundle file.
• The download process can be secure and with best practices for sensitive information.