search

solo-io / gloo

The Feature-rich, Kubernetes-native, Next-Generation API Gateway Built on Envoy
https://docs.solo.io/
Apache License 2.0
4.06k stars 433 forks source link

Add helm chart option to use customer supplied ca-cert for extauth #5694

Open byrdog55 opened 2 years ago

byrdog55 commented 2 years ago

Is your feature request related to a problem? Please describe. https://docs.solo.io/gloo-edge/latest/installation/advanced_configuration/extauth_custom_ca/#update-gloo-edge-enterprise The current instructions for using a customer supplied certificate authority with extauth are for a basic installation of gloo edge and adds additional steps to a deploy process. When turning on mTLS and Gateway verification the complexity increases and requires patches that differ from the examples in the current docs , see https://github.com/solo-io/gloo/issues/5655

Describe the solution you'd like I want a value(s) added that drives the configuration of the extauth deployment that will include a customer supplied certificate authority and works when global.glooMtls.enabled=true and gloo.gateway.validation.enabled=true

Describe alternatives you've considered multi step scripted install that wraps up all of the changes needed. This is a fragile solution that must be tailored to each individual use case.

Additional context https://solo-io.zendesk.com/agent/tickets/449

EItanya commented 2 years ago

Zendesk ticket #449 has been linked to this issue.

soloio-bot commented 2 years ago

Zendesk ticket #449 has been linked to this issue.

github-actions[bot] commented 2 months ago

This issue has been marked as stale because of no activity in the last 180 days. It will be closed in the next 180 days unless it is tagged "no stalebot" or other activity occurs.