Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support multiple certificates for K8s TLSStore #7210

Closed
raravena80 opened this issue Aug 24, 2020 · 1 comment
Closed

Support multiple certificates for K8s TLSStore #7210

raravena80 opened this issue Aug 24, 2020 · 1 comment

Comments

@raravena80
Copy link

Do you want to request a feature or report a bug?

Feature

What did you expect to see?

Currently, the TLSStore K8s CRD only allows you to supply the defaultCertificate but not specify an array of other certificates for other domains. This is supported by Traefik as pointed in the docs. For example:

tls:
  certificates:
    - certFile: /path/to/domain.cert
      keyFile: /path/to/domain.key
      stores:
        - default
    # Note that since no store is defined,
    # the certificate below will be stored in the `default` store.
    - certFile: /path/to/other-domain.cert
      keyFile: /path/to/other-domain.key

The default certificate is defined like this (which I believe is supported in the K8s CRD)

[tls.stores]
  [tls.stores.default]
    [tls.stores.default.defaultCertificate]
      certFile = "path/to/cert.crt"
      keyFile  = "path/to/cert.key"

Note that the docs say that you can only use the default certificate. They also say that's the case for K8s too.

Traefik currently only uses the TLS Store named "default". This means that if you have two stores that are named default in different kubernetes namespaces, they may be randomly chosen. For the time being, please only configure one TLSSTore named default.

Some background: https://stackoverflow.com/questions/63560000/traefik-kubernetes-multiple-ssl-certificates

@ldez
Copy link
Member

ldez commented Aug 24, 2020

duplicate of #4756

@ldez ldez closed this as completed Aug 24, 2020
@traefik traefik locked and limited conversation to collaborators Sep 24, 2020
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

No branches or pull requests

3 participants