tobs
tobs copied to clipboard
Allow users to provide their own certificate management solution for tracing
Some teams have an internal standard tool for managing certificates in Kubernetes like Vault or KMS. At the moment we require that users install cert-manager for the OpenTelemetry Operator to function.
We want to make it possible for Promscale administrators to use their own certificate management tool while still offering the option to install cert-manager for those that don't have one and/or want to use automatic certificate provisioning.
Tasks
- [ ] provide a way to use externally provisioned certificates for ot-operator consumption
- [ ] remove cert-managaer lifecycle management from tobs while keeping dependency on cert-manager types for folks who want to have automatic certificate provisioning
To explore, disabling option in operator helm chart - https://github.com/open-telemetry/opentelemetry-helm-charts/blob/main/charts/opentelemetry-operator/values.yaml#L53-L54
To explore, additional Job to create caBundle. Example from kube-prometheus - https://github.com/prometheus-community/helm-charts/blob/main/charts/kube-prometheus-stack/values.yaml#L1476-L1521
We haven't heard this request again. Given the size, I would reconsider if this is something we want to do as part of this epic or possibly postpone to a future epic.
cc: @VineethReddy02