Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Import CA certificates #114

Closed
wants to merge 2 commits into from
Closed

Import CA certificates #114

wants to merge 2 commits into from

Conversation

arbulu89
Copy link
Contributor

@arbulu89 arbulu89 commented Oct 16, 2024

Update: Apparently, the initial certificates we created for our demo IDP, they were created wrong, and that's why we were required to upload them to the machine. This means, that the requirement of uploading custom CA certs shouldn't be that important (actually, It would become a small corner case), so we can postpone this by now

Add option to import CA certificates to the cluster.
When SSO options are used and the IPD is hosted using TLS, the client (trento web in this case) must have the CA certificate installed in the system. This in helm is not a default scenario in many cases.

In order to have the option to import the CA certificates, I have added this new variable caStoreConfigmap that we can use for this purpose.
The usage would be like:

  1. Download the server CA (the whole chain) to your local machine as a .pem file. Put this certificate in a new folder
  2. Create a config map so the content can be uploaded to helm. For that: kubectl create configmap ca-pemstore --from-file=/folder_with_ca/. The name ca-pemstore can be any other string
  3. Run helm as usual adding this new variable: helm ... --set trento-web.caStoreConfigmap=ca-pemstore

With this, all the content in the /folder_with_ca/ is imported in the pod and trento web can use them.

@arbulu89 arbulu89 added the enhancement New feature or request label Oct 16, 2024
@arbulu89 arbulu89 marked this pull request as ready for review October 17, 2024 12:19
@arbulu89 arbulu89 closed this Oct 21, 2024
@stefanotorresi stefanotorresi deleted the import-ca-certs branch November 15, 2024 13:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Development

Successfully merging this pull request may close these issues.

1 participant