Skip to content

Configure NIC pods with zone_sync enabled with TLS support #7220

@AlexFenlon

Description

@AlexFenlon

Is your feature request related to a problem? Please describe.
As an engineer, I want zone_sync to have TLS as a feature for NIC to allow state sharing.
Prereq: #7219

nginx directives needed for this issue

zone_sync_ssl
zone_sync_ssl_certificate
zone_sync_ssl_certificate_key
zone_sync_ssl_trusted_certificate
zone_sync_ssl_crl
zone_sync_ssl_verify

Acceptance Criteria

  • Include TLS for this issue
  • zone-sync data read from the nginx-config (ConfigMap) including zone-sync TLS values: ssl secret, trusted cert and verify them
  • input data validated (including security validation - see above)
  • generate headless service with TLS (no user input, read namespace name only)
  • templates generate correct zone-sync config with TLS
  • Helm implementation for TLS
  • Manifest implementation for TLS

Metadata

Metadata

Assignees

No one assigned

    Labels

    area/securityIssues related to security capabilities or concernsproposalAn issue that proposes a feature request

    Type

    Projects

    Status

    Prioritized backlog

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions