pmorie / osb-starter-pack

A quickstart for making a new Open Service Broker
Apache License 2.0
69 stars 47 forks source link

serve securely with OpenShift generated certificates #90

Closed jboyd01 closed 6 years ago

jboyd01 commented 6 years ago

Requires https://github.com/pmorie/osb-broker-lib/pull/42 to be merged and starter pack to be revendored.

Use OpenShift's serving-cert-secret-name annotation off the server to auto generate SSL cert and key and default to running securely. This PR only covers generating the ssl certificate files for OpenShift, I did not include changes for running under Kubernetes.

An easy follow up to "fix" Kubernetes is to add the --insecure flag to the helm chart so when run under K8s the default is to server insecurely. Alternatively, Helm can created certificates.

jboyd01 commented 6 years ago

/retest