gardener / external-dns-management

Environment to manage external DNS entries for a kubernetes cluster
Apache License 2.0
81 stars 67 forks source link

Infoblox-Provider: Allow to reference CAcert in ConfigMap #327

Open dermorz opened 11 months ago

dermorz commented 11 months ago

What would you like to be added: The DNSProvider for Infoblox has the fields sslVerify and caCert to enable TLS verification. Currently caCert is a string field that requires the user to inline a CA-Certfificate(-chain) to use TLS verification, because the content of that string is directly put into the cert-pool.

I would love to be able to put a reference ConfigMap, that holds the needed CA-Certificate(-chain).

For example it could look like:

# Reference to a ConfigMap with CA certificates. All keys will be iterated and the certificates
# from the values will be added the the external-dns-management trust store. Only needed if
# sslVerify = true and use of self-signed/internal certificate  
caCertRef:
  configMap: 'ca-bundle'

Why is this needed: For users of trust-manager such ConfigMap is already available for usage and not having to inline the certificate is decreasing the maintainance effort.