django-DefectDojo
django-DefectDojo copied to clipboard
[HELM] Configuring HTTPS
Hi! thank you in advance for developing this awesome tool :)
I've been reading the documentation and READMEs searching for a simple but secure way to configure https.
I'm testing the k8s/helm deployment, not docker-compose.
I've seen this and its fine for configuring HTTPS in the nginx with docker.
But in the Kubernetes README I've seen that is not yet implemented the option to add my own certificate:
If you want to encrypt the traffic to the nginx server you can use the option --set nginx.tls.enabled=true and --set nginx.tls.generateCertificate=true to generate a self signed certificate and use the https config. The option to add you own pregenerated certificate is generelly possible but not implemented in the helm chart yet.
I've thought that it could be possible to generate kubernetes secrets with cert/key and add them via extraSecrets in values. Also mount that secrets as extraVolumes in /etc/nginx/ssl/
Is this the way it is intended to do this?
More than including a new feature, Im thinking if there is a way to expand documentation related with this.
Also if I can configure HTTPS this way I can share the solution in this ticket
Kind regards!
Is there any reason not to use TLS on top of the ingress, instead of the nginx itself?