search

jimmidyson / configmap-reload

Simple binary to trigger a reload when a Kubernetes ConfigMap is updated
Apache License 2.0
969 stars 191 forks source link

Add Mutual TLS Support #74

Open tejaswiniVadlamudi opened 2 years ago

tejaswiniVadlamudi commented 2 years ago
  1. Support TLS 1.3 and 1.2 versions
  2. ConfigMap-reload needs to support Mutual TLS if the target process is running in TLS mode
  3. ConfigMap-reload can also expose metrics over Mutual TLS
  4. TLS Server in ConfigMap-reload can wait for the TLS Certs to be available as part of the start-up process
  5. TLS Certificates need to be automatically reloaded (if expired) using inotify mechanism

A recent experimental feature in Prometheus allows users to configure direct TLS support without the usage of proxies. See https://github.com/prometheus/prometheus/pull/8316, https://prometheus.io/docs/prometheus/latest/configuration/https/ and https://prometheus.io/docs/guides/tls-encryption/ for more details.