Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Capability to support CA self signed certificates in EKS #135

Open
sowjanya-eks opened this issue Aug 8, 2023 · 3 comments
Open

Capability to support CA self signed certificates in EKS #135

sowjanya-eks opened this issue Aug 8, 2023 · 3 comments

Comments

@sowjanya-eks
Copy link

sowjanya-eks commented Aug 8, 2023

Hello Mangle Team, (@rpraveen-vmware, @ranjansvmware)

Thank you for joining yesterday's call. As we discussed here is the new request for CA self signed certificates.

This is a feature request to support CA self signed certificates in EKS with mangle deployment in both UI and command prompt line.

Regards,
Sowjanya.

@sowjanya-eks
Copy link
Author

Could anyone please acknowledge this issue. @rpraveen-vmware, @ranjansvmware

@ranjansvmware
Copy link
Contributor

The support for CA certificate is good feature to have in Mangle. In most cases CA signed certificate are in .p12 or .jks store format. It should be supporting both.

This should be implemented in three ways:

  1. During deployment: Docker container creation should be taking the certificate and bundling into the container image.
  2. At container run time: "docker start" should be taking keystore format, keypass, storepass, certificate file as docker parameters.
  3. Post Deployment: UI/Command line replacement support of self signed certificate with CA signed certificate.

@sowjanya-eks
Copy link
Author

At this time, we cannot implement 1 and 2, so we tried with the option 3. However, the new JKS is not picked up. will it be possible to connect over the call and we have required JKS. @rpraveen-vmware, @ranjansvmware

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants