-
Notifications
You must be signed in to change notification settings - Fork 2k
Open
Labels
area/securityIssues related to security capabilities or concernsIssues related to security capabilities or concernsproposalAn issue that proposes a feature requestAn issue that proposes a feature request
Description
Is your feature request related to a problem? Please describe.
As an engineer, I want zone_sync to have TLS as a feature for NIC to allow state sharing.
Prereq: #7219
nginx directives needed for this issue
zone_sync_ssl
zone_sync_ssl_certificate
zone_sync_ssl_certificate_key
zone_sync_ssl_trusted_certificate
zone_sync_ssl_crl
zone_sync_ssl_verify
Acceptance Criteria
- Include TLS for this issue
-
zone-sync
data read from thenginx-config
(ConfigMap) including zone-sync TLS values: ssl secret, trusted cert and verify them - input data validated (including security validation - see above)
- generate headless service with TLS (no user input, read namespace name only)
- templates generate correct zone-sync config with TLS
- Helm implementation for TLS
- Manifest implementation for TLS
Metadata
Metadata
Assignees
Labels
area/securityIssues related to security capabilities or concernsIssues related to security capabilities or concernsproposalAn issue that proposes a feature requestAn issue that proposes a feature request
Type
Projects
Status
Prioritized backlog