Seagate / cortx-k8s

CORTX Kubernetes Orchestration Repository
https://github.com/Seagate/cortx
Apache License 2.0
6 stars 47 forks source link

CORTX-33018: Support external ssl secret #362

Closed walterlopatka closed 2 years ago

walterlopatka commented 2 years ago

Description

This change supports a user-specified TLS/SSL certificate.

In solution.yaml, if common.ssl.external_certificate is specified, then a secret with the specified name is presumed to hold the certificate to be used by CORTX servers.

Requirements:

By default common.ssl.external_secret is not specified. In this case a certificate is generated. (Technically, it is not generated at the time of deploy, but it uses a previously generated certificate that expires in about 10 years. It would be better to generate this certificate at deploy time, but this PR does not address this. It can be addressed in the future.)

Type of change

Applicable issues

CORTX image version requirements

N/A

How was this tested?

Checklist

If this change requires newer CORTX or third party image versions:

If this change addresses a CORTX Jira issue:

walterlopatka commented 2 years ago

Thanks, @keithpine . Great comments. I have addressed them all, I think.