elastisys / welkin

Documentation for the Welkin project - a Kubernetes-based platform for software critical to society
https://elastisys.io/
Apache License 2.0
124 stars 32 forks source link

adr: open cert-manager netpols #949

Closed aarnq closed 2 months ago

aarnq commented 2 months ago

⚠️ IMPORTANT ⚠️: This is a public repository. Make sure to not disclose:

Quality gates:

Add the decision on cert-manager.

Note: I realise that we don't actually give cert-manager 0.0.0.0:443/tcp by default in apps config, rather when we configure it we do set it to 0.0.0.0:443/tcp as that is required to communicate to Let's Encrypt.

So, should I add that this is plainly recommendation, and the standard practice for us? Or should we make it the default for prod and dev flavours, and leave it to be set explicitly in air-gapped?