connaisseur
connaisseur copied to clipboard
Make Connaisseur TLS certificate configurable
Describe the feature
Currently, Connaisseur generates a self-signed certificate for communication. This should be made configurable via helm/values.yaml
to e.g. provide a cert or reference a corresponding secret.
Optional: Is your feature request related to a problem? Please describe. There are situations in which the self-signed certificate may not work and a cert might have to be provided externally. Also, how would Connaisseur work with solutions such as istio and 2-way TLS?
Optional: Implementation ideas
There should be a configuration option in helm/values.yaml
under deployment
. That might allow several configurations:
- configure certificate or use self-signed (probably use self-signed if not provided otherwise)
- should cert be used at all (considering the istio case) and further configuration options
- configure cert directly or via secret (probably the latter would be best)
Optional: Additional context
- see also #224 for more information.
- make sure to also check implications for #181 related issues
Resolved by #437
re-opening as not actually resolved.