Skip to content

Secure endpoints - Allow skipping ca.crt or key mapping for serverCertSecret #225

@RakeshThirunahari

Description

@RakeshThirunahari

Company or project name

No response

Use case

Though in the documentation it is mentioned that the SSL certificate secret under serverCertSecret is compatible with the cert-manger generated certificates, cert-mager it self doesn't produce ca.crt with ACME issuer. This makes it impractical to have this combination for enterprise applications.

REF:
cert-manager/cert-manager#1571

Describe the solution you'd like

Allowing to skip mounting ca.crt or the being able to map it form tls.crt (has full chain with ACME) in this case will help to have compatibility with these secrets. Otherwise the old keeps failing to start due to missing ca.crt key.

Describe alternatives you've considered

No response

Additional context

No response

Metadata

Metadata

Assignees

No one assigned

    Labels

    featureFeature request

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions