kubernetes-ingress icon indicating copy to clipboard operation
kubernetes-ingress copied to clipboard

Configure NIC pods with `zone_sync` enabled with TLS support

Open AlexFenlon opened this issue 10 months ago • 2 comments

Is your feature request related to a problem? Please describe. As an engineer, I want zone_sync to have TLS as a feature for NIC to allow state sharing. Prereq: https://github.com/nginx/kubernetes-ingress/issues/7219

nginx directives needed for this issue

zone_sync_ssl
zone_sync_ssl_certificate
zone_sync_ssl_certificate_key
zone_sync_ssl_trusted_certificate
zone_sync_ssl_crl
zone_sync_ssl_verify

Acceptance Criteria

  • [ ] Include TLS for this issue
  • [ ] zone-sync data read from the nginx-config (ConfigMap) including zone-sync TLS values: ssl secret, trusted cert and verify them
  • [ ] input data validated (including security validation - see above)
  • [ ] generate headless service with TLS (no user input, read namespace name only)
  • [ ] templates generate correct zone-sync config with TLS
  • [ ] Helm implementation for TLS
  • [ ] Manifest implementation for TLS

AlexFenlon avatar Jan 27 '25 10:01 AlexFenlon

Hi @AlexFenlon thanks for reporting!

Be sure to check out the docs and the Contributing Guidelines while you wait for a human to take a look at this :slightly_smiling_face:

Cheers!

github-actions[bot] avatar Jan 27 '25 10:01 github-actions[bot]

@AlexFenlon @javorszky @jjngx I'm going to remove this task the epic so we can close off the initial implementation. We can keep this task in the backlog and work on it in the next release to enhance this capability

shaun-nx avatar Mar 28 '25 11:03 shaun-nx