Uploaded image for project: 'Knative Serving'
  1. Knative Serving
  2. SRVKS-444

Extend proxy support to custom TLS cert bundles

XMLWordPrintable

    • Serverless Sprint 182

      Add custom TLS cert bundle proxy support of cluster proxy settings

      As far as trusted CA bundles, see https://github.com/openshift/enhancements/blob/0d53973f356b4a31bef86bf015a24d06f27bae90/enhancements/proxy/global-cluster-egress-proxy.md for details around how that works (search for 'CAs'). It looks like we create a ConfigMap with a special label and the trusted CA gets injected into that ConfigMap that we can mount and use from our controller.

      https://github.com/openshift/cluster-monitoring-operator/pull/602/files is an example of another component creating this ConfigMap and then reading the values from it. That's a good reference for how to create the ConfigMap yaml, but how we read and consume the value from it will likely differ than that example. https://github.com/openshift/console-operator/pull/265/files is another example of how to mount and use this CA bundle from the ConfigMap, although again is not exactly what we'd have to do.

              markusthoemmes Markus Thömmes (Inactive)
              bbrownin@redhat.com Ben Browning
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

                Created:
                Updated:
                Resolved: