canonical / istio-operators

Charmed Istio
2 stars 17 forks source link

Allow istio-gateway to use ACME http challenge for letsencrypt certificates #464

Open dparv opened 4 months ago

dparv commented 4 months ago

Context

The charm should ideally be able to request a letsencrypt certificate via ACME http challenge and reply to .well-known/acme-challenge/ with a token request.

What needs to get done

  1. Add functionality to use any ACME provider to request a certificate via letsencrypt
  2. Add relation data from istio-pilot csr-domain-name towards istio-gateway
  3. Add option to save a token locally and serve it under .well-known/acme-challenge/<TOKEN> loation

Definition of Done

The charm can request and assign a certificate for a FQDN configured in istio-pilot csr-domain-name.

syncronize-issues-to-jira[bot] commented 4 months ago

Thank you for reporting us your feedback!

The internal ticket has been created: https://warthogs.atlassian.net/browse/KF-5895.

This message was autogenerated