kubernetes-ingress
kubernetes-ingress copied to clipboard
Configure NIC pods with `zone_sync` enabled with TLS support
Is your feature request related to a problem? Please describe. As an engineer, I want zone_sync to have TLS as a feature for NIC to allow state sharing. Prereq: https://github.com/nginx/kubernetes-ingress/issues/7219
nginx directives needed for this issue
zone_sync_ssl
zone_sync_ssl_certificate
zone_sync_ssl_certificate_key
zone_sync_ssl_trusted_certificate
zone_sync_ssl_crl
zone_sync_ssl_verify
Acceptance Criteria
- [ ] Include TLS for this issue
- [ ]
zone-syncdata read from thenginx-config(ConfigMap) including zone-sync TLS values: ssl secret, trusted cert and verify them - [ ] input data validated (including security validation - see above)
- [ ] generate headless service with TLS (no user input, read namespace name only)
- [ ] templates generate correct zone-sync config with TLS
- [ ] Helm implementation for TLS
- [ ] Manifest implementation for TLS
Hi @AlexFenlon thanks for reporting!
Be sure to check out the docs and the Contributing Guidelines while you wait for a human to take a look at this :slightly_smiling_face:
Cheers!
@AlexFenlon @javorszky @jjngx I'm going to remove this task the epic so we can close off the initial implementation. We can keep this task in the backlog and work on it in the next release to enhance this capability