Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Configure NIC pods with zone_sync enabled with TLS support #7220

Open
7 tasks
AlexFenlon opened this issue Jan 27, 2025 · 1 comment
Open
7 tasks

Configure NIC pods with zone_sync enabled with TLS support #7220

AlexFenlon opened this issue Jan 27, 2025 · 1 comment
Labels
proposal An issue that proposes a feature request

Comments

@AlexFenlon
Copy link
Contributor

AlexFenlon commented Jan 27, 2025

Is your feature request related to a problem? Please describe.
As an engineer, I want zone_sync to have TLS as a feature for NIC to allow state sharing.
Prereq: #7219

nginx directives needed for this issue

zone_sync_ssl
zone_sync_ssl_certificate
zone_sync_ssl_certificate_key
zone_sync_ssl_trusted_certificate
zone_sync_ssl_crl
zone_sync_ssl_verify

Acceptance Criteria

  • Include TLS for this issue
  • zone-sync data read from the nginx-config (ConfigMap) including zone-sync TLS values: ssl secret, trusted cert and verify them
  • input data validated (including security validation - see above)
  • generate headless service with TLS (no user input, read namespace name only)
  • templates generate correct zone-sync config with TLS
  • Helm implementation for TLS
  • Manifest implementation for TLS
@AlexFenlon AlexFenlon added the proposal An issue that proposes a feature request label Jan 27, 2025
Copy link

Hi @AlexFenlon thanks for reporting!

Be sure to check out the docs and the Contributing Guidelines while you wait for a human to take a look at this 🙂

Cheers!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
proposal An issue that proposes a feature request
Projects
Status: Todo ☑
Development

No branches or pull requests

1 participant