borchero/switchboard

Allow setting default `Certificate` specs

DerEnderKeks opened this issue · 4 comments

It would be nice if it was possible to set custom default specs for the Certificate CRs that switchboard creates.
Specifically I'd like to set the privateKey specs.

Btw.: Thanks for this great little project!

Do I understand correctly that this is something that you'd like to set globally for the cert-manager integration, i.e. for all processed ingress routes?

Yes, exactly. Setting these specs per ingress via annotations would also be interesting, but a global default is more important to me at the moment.

Sorry this took so long! The idea is to allow the cert-manager integration to specify a certificateTemplate (just like you have podTemplate for a deployment, for example) instead of merely specifying the issuer. Let me know if this satisfies your requirement!

That sounds like a perfectly fine solution, thanks!