Support user-defined cluster TLS certificates

pingcap / tidb-operator

TiDB operator creates and manages TiDB clusters running in Kubernetes.

https://docs.pingcap.com/tidb-in-kubernetes/

Apache License 2.0

1.22k stars 493 forks source link

Closed weekface closed 4 years ago

weekface commented 4 years ago

Is your feature request related to a problem? Please describe:

TiDB cluster TLS not work on EKS: https://github.com/pingcap/tidb-operator/issues/1685, because it doesn't support custom SANs. We should also support user-defined cluster TLS certificates, like https://github.com/pingcap/tidb-operator/pull/1714 does.

Describe the feature you'd like:

Describe alternatives you've considered:

Teachability, Documentation, Adoption, Migration Strategy:

weekface commented 4 years ago

Pump and Drainer may also require user-defined certificates.