nginx-gateway-fabric icon indicating copy to clipboard operation
nginx-gateway-fabric copied to clipboard

Allow disabling cert-generator with a Helm value

Open hafe opened this issue 1 month ago • 2 comments

Is your enhancement request related to a problem? Please describe. Since it is not recommended to use the cert-generator in a production environment it should be possible to disable it when installing. Preferably and even better, disabled by default.

Even if e.g cert-manager is used to generate a cert, there is a potential race when installing the chart. If cert-manager has not generated secrets yet, the cert-generator will kick in and do it and you still have self signed certs when not intended.

What would you like to be added:

A boolean value to disable everything related to the cert-generator.

Why this is needed: See above

Additional context Add any other context or screenshots about the enhancement request here.

hafe avatar Oct 25 '25 08:10 hafe

Hi @hafe! Welcome to the project! 🎉

Thanks for opening this issue! Be sure to check out our Contributing Guidelines and the Issue Lifecycle while you wait for someone on the team to take a look at this.

nginx-bot[bot] avatar Oct 25 '25 08:10 nginx-bot[bot]

Thanks @hafe!

Yes I absolutely agree, this should be configurable.

In order to make it backwards compatible, we won't disable by default, but we will add this option to the Helm chart.

Thanks so much for bringing this to our attention!

ciarams87 avatar Oct 29 '25 08:10 ciarams87