-
Notifications
You must be signed in to change notification settings - Fork 70
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Signing key in secret #66
Conversation
d5a32eb
to
979501e
Compare
7bfc092
to
02597e4
Compare
bf25e0b
to
9ea4dbc
Compare
9ea4dbc
to
9cfbc8c
Compare
9cfbc8c
to
173a527
Compare
d5e5abc
to
cf30710
Compare
Signed-off-by: Thomas Sontheimer <tgomas@users.noreply.github.com>
Signed-off-by: Thomas Sontheimer <tgomas@users.noreply.github.com>
Signed-off-by: Thomas Sontheimer <tgomas@users.noreply.github.com>
Signed-off-by: Thomas Sontheimer <tgomas@users.noreply.github.com>
cf30710
to
a8b0ce5
Compare
@travisgroth all comments have been processed: signing-key can be generated at install and is stored in a dedicated secret. Could you please help me to get it merged ? I'm still open to improve it if you have any additional comment. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
🎉 LGTM
@tgomas FYI, I had to unpublish 6.0.5 as this does actually cause a breaking change to existing charts. I'm going to re-release as 7.0.0. That's my mistake for not catching it. I will also add instructions similar to what we had for the 5.x release https://github.com/pomerium/pomerium-helm/tree/master/charts/pomerium#500-1. |
Here is a proposition to add a
proxy.signingKey
parameter which is stored in the secret.close #65