cetic / helm-nifi

Helm Chart for Apache Nifi
Apache License 2.0
215 stars 228 forks source link

[cetic/nifi] Allow cert-manager to use an existing cert-manager CA #284

Open rajan123456 opened 1 year ago

rajan123456 commented 1 year ago

Is your feature request related to a problem? Please describe. When installing this helm chart, I would like to make use of cert-manager related objects to generate and mount certificates to the workloads. However, current cert-manager implementation creates it's own Issuer objects. I would like to have either an option to make use of an existing ClusterIssuer or Issuer which refers to a pre-existing secret which can be controlled from the values.yaml file.

Describe the solution you'd like Allow modification to the Issuer object to make use of an existing secret, or disable the creation of Issuer entirely and refer to a ClusterIssuer instead.

Describe alternatives you've considered Using the existing helm chart by disabling cert-manager requires manually plugging in Certificates, which is painful. Manually modify the Issuer post installation to make use of existing secrets, which is painful. Automate modifications to the Issuer objects using helm postRenderer and kustomize, which is cumbersome to maintain.

Additional context For OIDC, I would prefer to use a ClusterIssuer across namespaces which generates certificates for both my OIDC IdP and nifi, which exist in different namespaces.