issues
search
retaildevcrews
/
ngsa
Next Generation Symmetric Apps
MIT License
5
stars
7
forks
source link
Integrate cse.ms wildcard cert with Traefik ingress, and key vault
#531
Open
AAkindele
opened
3 years ago
AAkindele
commented
3 years ago
Description
What:
The aks-secure-baseline walkthrough deploys a sample application. Expose the application with a "cse.ms" domain and valid wildcard TLS certificate.
Why:
To setup aks-secure-baseline with custom domains and a valid TLS certificate
When:
On initial setup of an aks-secure-baseline environment
Where:
App gateway, and Traefik ingress controller
Tasks
[ ] Document steps needed to add a custom cse.ms certificate to aks-secure-baseline (
https://github.com/retaildevcrews/ngsa/issues/633
)
[ ] Design review for automating the steps with terraform and helper scripts (
https://github.com/retaildevcrews/ngsa/issues/635
)
[ ] Add automated setup of the custom certificate to environment creation (
https://github.com/retaildevcrews/ngsa/issues/642
)
[ ] Architecture diagram for App Gateway, Traefik, and custom certificate (
https://github.com/retaildevcrews/ngsa/issues/585
)
Acceptance Criteria
Access ngsa-memory running in the cluster from internet
Use https and cse.ms domain
Constraints
Wild card cert is in RDC teams, will need someone with access to upload to KeyVault
References:
References
dsturgell
commented
3 years ago
Should we use terraform or scripting?
Description
What:
Why:
When:
Where:
Tasks
Acceptance Criteria
Constraints
References: