Uploaded image for project: 'OpenShift Request For Enhancement'
  1. OpenShift Request For Enhancement
  2. RFE-1950

Add the option to reference certificates from a secret in an edge terminated secured route

XMLWordPrintable

    • False
    • False
    • Undefined

      1. Proposed title of this feature request
      Add the option to reference certificates from a secret in an edge terminated secured route

      2. What is the nature and description of the request?
      Edge terminated secured routes that are assigned a specific certificate include the public and private parts of the certificate as part of the route yaml definition. This is a problem when using GITOPS because the yaml definition file is pushed to a git repo and no sensitive information should be added there.
      At the moment the possible workaround customers can apply is using ingress objects instead of routes, because ingress reference the TLS certificate via a secret.
      What I would like to see is an additional field in the route spec like the valueFrom existing in the pod spec:

      $ oc explain pod.spec.containers.env
      ...
      FIELDS:
      name <string> required
      Name of the environment variable. Must be a C_IDENTIFIER.

      value <string>
      Variable references $(VAR_NAME) are expanded using the previous defined
      environment variables in the container and any service environment
      variables. If a variable cannot be resolved, the reference in the input
      string will be unchanged. The $(VAR_NAME) syntax can be escaped with a
      double $$, ie: $$(VAR_NAME). Escaped references will never be expanded,
      regardless of whether the variable exists or not. Defaults to "".

      valueFrom <Object>
      Source for the environment variable's value. Cannot be used if value is not
      empty.

      3. Why does the customer need this? (List the business requirements here)
      We are recommending and encouraging our customers to use gitops and we should close the security risks it has.

      4. List any affected packages or components.

            ddharwar@redhat.com Deepthi Dharwar
            rhn-support-jjerezro Jose Ignacio Jerez Rodriguez
            Votes:
            1 Vote for this issue
            Watchers:
            7 Start watching this issue

              Created:
              Updated:
              Resolved: