Uploaded image for project: 'OpenShift Windows Containers'
  1. OpenShift Windows Containers
  2. WINC-633

Copy additional CA cert bundle to Windows instances

XMLWordPrintable

    • Icon: Story Story
    • Resolution: Done
    • Icon: Normal Normal
    • WMCO 9.0.0
    • None
    • wmco
    • Strategic Product Work
    • 3
    • False
    • False
    • OCPSTRAT-292 - Support cluster-wide proxy on Windows Containers
    • Undefined
    • WINC - Sprint 239, WINC - Sprint 240

      Cluster admins can provide custom certificates that are required to communicate through their man-in-the-middle egress proxy. These user-provided certs need to be imported onto Windows nodes so they can become fully proxy aware. This story is the first step in support custom CA certificates for cluster-wide proxy.

      Description

      This story covers copying over the trusted CA bundle containing all the additional certs onto each Windows instance. The trust bundle must be kept up to date with the data present in the trusted-ca ConfigMap. 

      Acceptance Criteria

      • when a cluster wide proxy is in use, the cert bundle exists in a file on each Windows node
      • When proxy certificates are changed/rotated, the cert bundle file on each Windows node is updated with the new cert bundle

              mohashai Mohammad Shaikh
              mohashai Mohammad Shaikh
              Votes:
              3 Vote for this issue
              Watchers:
              7 Start watching this issue

                Created:
                Updated:
                Resolved: