NetApp / trident

Storage orchestrator for containers
Apache License 2.0
762 stars 222 forks source link

Allow tridentbackendconfig to use standard kubernetes tls secret generated by cert-manager for auth with ontap nas backend #928

Open andrewcorr opened 1 month ago

andrewcorr commented 1 month ago

Currently it is required to embed the clientcertificate in the backend config and point at a secret containing the private key. We would like to be able to just specify a secret and key name to tridentbackend to consume, this would enable us to rotate certs using cert manager without any human intervention or code which copies the content of the secret generated by cert manager into the backendconfig and separate secret containing private key.