Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Updating Helm chart to support GCP cert provider for TLS #8457

Closed
devinbost opened this issue Nov 6, 2020 · 2 comments
Closed

Updating Helm chart to support GCP cert provider for TLS #8457

devinbost opened this issue Nov 6, 2020 · 2 comments
Labels
type/enhancement The enhancements for the existing features or docs. e.g. reduce memory usage of the delayed messages

Comments

@devinbost
Copy link
Contributor

In most production environments, using self-signed certs is not acceptable for TLS. Certs are expected to be backed by a CA for security reasons. It appears that the Pulsar Helm charts currently only support self-signed certificates.
The doc https://pulsar.apache.org/docs/en/helm-overview/ seems to suggest that the Helm chart also supports Let's Encrypt, but the Helm chart template appears to only accept "selfsigning" as a parameter: https://github.com/apache/pulsar-helm-chart/blob/master/charts/pulsar/templates/tls-cert-internal-issuer.yaml#L21

It would be helpful to also support GCP as a cert provider for TLS. This article has some information on using cert-manager with GCP: https://cert-manager.io/docs/configuration/acme/dns01/google/

@devinbost devinbost added the type/enhancement The enhancements for the existing features or docs. e.g. reduce memory usage of the delayed messages label Nov 6, 2020
@codelipenghui
Copy link
Contributor

@devinbost Is it better to move this issue to https://github.com/apache/pulsar-helm-chart/issues? We have moved all helm charts to https://github.com/apache/pulsar-helm-chart/issues

@devinbost
Copy link
Contributor Author

@codelipenghui Noted. I linked the issue, and I'll close it here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
type/enhancement The enhancements for the existing features or docs. e.g. reduce memory usage of the delayed messages
Projects
None yet
Development

No branches or pull requests

2 participants