Open andreee94 opened 2 years ago
@andreee94 I think this is a great idea that somehow relates to the earlier issue #225 to allow specifying your own cert. I am not a pro in certManager, but would think that externalizing the management of TLS certs would be a great feature. We'd probably have to make sure that cert renewal restarts Connaisseur and does not break the install (we have experienced issues in the past), but I'd be up for implementing this. Would have to understand the details a bit better though... @phbelitz might have more feedback on this.
thanks for the awesome idea :pray:
Describe the feature The Kubernetes validating and mutating admission webhooks require a self signed certificate. Until now the certificate is generated automatically when the helm chart is installed but the lifecycle has to be managed manually.
In case the cluster have already installed the cert-manager utility, the certificate management can be delegated to it.
Cert manager can that inject the
caBundle
inside theMutatingWebhookConfiguration
.Optional: Is your feature request related to a problem? Please describe.
Optional: Implementation ideas
certificate_webhook-conf.yaml
file:Example of
values.yaml
structure:This requires and already installed CA. This is an example of a self signed ca created with cert manager:
Optional: Additional context