Standa Láznička
Standa Láznička
/retest-required
/retest-required
/retest-required
/close superseded by https://github.com/openshift/console/pull/13713
I'm not a big fan of ignoring certificate verification. I'd suggest finding a way to generate the certificate and supply its signer to the upstream-ca option of the proxy, e.g....
I'd like to assume an application using self-signed certs would publish at least the serving certificate in a well-known location - likely specific per application, but the upstream trust location...
No need to apologize :slightly_smiling_face: I don't think there were private keys before in the repo, which is a little bit of a difference. I believe Red Hat infosec detects...
> Is there an alternative that you would recommend? An ideal alternative would be something we can actually run in a container but that might be hard. Basically you'd have...
Sorry about the delay, I'll try to get to this at the beginning of the next week.