search

redhat-cop / keepalived-operator

An operator to manage VIPs backed by keepalived
Apache License 2.0
118 stars 36 forks source link

[RFE] authentication as a first class parameter of the CR #48

Closed obockows closed 3 years ago

obockows commented 3 years ago

If one would like to configure Keepalived authentication in a configuration file using block in vrrp_instance section:

   authentication {
       auth_type PASS
       auth_pass passw123
   }

it doesn't work because verbatim configs are not really designed for multi-line configurations. Maybe this is worth making authentication a first-class parameter of the CR, maybe referencing a secret.

stefffhem commented 3 years ago

We have the same problem. We need to setup the following option in keepalived:


authentication {
       auth_type PASS
       auth_pass 12345
   }

I try to do this via annotation in svc but multiline seems to be a problem with the verbatimconfigs. To put this config in a secret seems to be a good solution if possible.

THX
raffaelespazzoli commented 3 years ago

@tommasopozzetti given your recent contributions, would you consider also implementing this feature?

tommasopozzetti commented 3 years ago

@raffaelespazzoli I will take a look at this to try and add it in the KeepalivedGroup CRD

raffaelespazzoli commented 3 years ago

thanks. in the CRD I'd like to have a reference to a secret containing the authentication information.

On Thu, Mar 4, 2021 at 7:39 PM Tommaso Pozzetti notifications@github.com wrote:

@raffaelespazzoli https://github.com/raffaelespazzoli I will take a look at this to try and add it in the KeepalivedGroup CRD

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub https://github.com/redhat-cop/keepalived-operator/issues/48#issuecomment-791056809, or unsubscribe https://github.com/notifications/unsubscribe-auth/ABPERXGMD4PZAABTEU7R3ELTCAR2TANCNFSM4UI3QO4A .

-- ciao/bye Raffaele