zalando/skipper

Secure RouteGroups with Kubernetes TLS Secrets

Closed this issue · 1 comments

rickhlx commented

Skipper currently has the ability to dynamically terminate Ingress using Kubernetes TLS secrets.

#1974

We would like to add this functionality to RouteGroups as well.

Describe the solution you would like

  • Update the RouteGroup CRD to add a TLS secret to be used to terminate the connection.
  • Update Skipper to terminate TLS on RouteGroups

Describe alternatives you've considered (optional)
The only alternative is to use Ingress which is limited.

Would you like to work on it?
Yes

AlexanderYastrebov commented

I guess we can borrow the configuration structure from Ingress

  tls:
  - hosts:
      - https-example.foo.com
    secretName: testsecret-tls

RouteGroup CRD is derived from this definition.

  • 👍1