Skip to content

Extend NGINX shield to handle cross-namespace ingress and tls secrets#754

Merged
awhdesmond merged 2 commits into
mainfrom
awhdesmond/nginx-shield-dynamic-tls
Jun 26, 2026
Merged

Extend NGINX shield to handle cross-namespace ingress and tls secrets#754
awhdesmond merged 2 commits into
mainfrom
awhdesmond/nginx-shield-dynamic-tls

Conversation

@awhdesmond

Copy link
Copy Markdown
Contributor
  • Extend loader.sh script to fetch Ingress & TLS secrets across namespaces, and create a mapping of hostname <-> certificate file.
  • Configure NGINX to select the correct TLS certificates by comparing SNI, while providing a default fallback certificate.
  • SSL optimization via caching and enable TLS session

@ensonic ensonic requested a review from Ongy June 25, 2026 06:25
@csieber

csieber commented Jun 25, 2026

Copy link
Copy Markdown
Contributor

Is this ready for review? Draft state + request for review sends a mixed message :)

@awhdesmond awhdesmond marked this pull request as ready for review June 25, 2026 10:47
@awhdesmond

Copy link
Copy Markdown
Contributor Author

Is this ready for review? Draft state + request for review sends a mixed message :)

Yes! Thanks!

@rastislav-vcrs rastislav-vcrs left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you! :shipit:

@awhdesmond awhdesmond force-pushed the awhdesmond/nginx-shield-dynamic-tls branch from 7c8600b to e4aa5da Compare June 26, 2026 00:18
@awhdesmond awhdesmond merged commit 1e7dc95 into main Jun 26, 2026
7 checks passed
@awhdesmond awhdesmond deleted the awhdesmond/nginx-shield-dynamic-tls branch June 26, 2026 00:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants