Router SSL configuration: allow specification of SSL session ticket key

[james-thimont-bcgdv]

If we want to scale the NGINX instance to more than one instance and use SSL session tickets, each instance must have the same key.

Could you add that to the router annotation configuration?

Or even better could Deis automatically rotate the keys? https://blog.twitter.com/2013/forward-secrecy-at-twitter-0

[felixbuenemann]

I noticed the same. This could probably be handled by storing the session key into a secret then this secret could be updated and nginx would reload the configuration. Rotating the keys could then be scripted using kubectl or the kubernetes api.

[Cryptophobia]

This issue was moved to teamhephy/router#23