support terminated_https on load balancer clouddriver

[derekolk]

Provide a caching endpoint for certs that will allow users to select an available cert.
Modify existing upsert atomic operation to take in selected cert.

[derekolk]

Scenario:

• Allow user to pass in TLS container name and optionally list of SNI container names when the external protocol TERMINATED_HTTPS is selected.

Design:

• Validate container names passed and throw client exception (4XX) if invalid
• Pass HATEOS references into openstack listener creation.

Impact:

• UpsertOpenstackLoadBalancerAtomicOperation
• Requires changes to openstack4j for Barbican

Reference

• https://wiki.openstack.org/wiki/Network/LBaaS/docs/how-to-create-tls-loadbalancer

Blocker

• https://bugs.launchpad.net/barbican/+bug/1519170
  • Current workaround is to run your spinnaker instance as admin and create containers underneath admin account only.

[derekolk]

The only way that I have been able to get this working is to create a container and load balancer in the admin project. Not able associate a container to a load balancer in non-admin project. Trying to reach out to openstack team to see if there is a work around for this.

[derekolk]

Have a blocker when creating/updating listener with sniContainerRefs ... https://bugs.launchpad.net/octavia/+bug/1624512

[spinnakerbot]

This issue is tagged as 'stale' and hasn't been updated in 89 days, so we are tagging it as 'to-be-closed'. It will be closed in 45 days unless updates are made. If you want to remove this label, comment:

@spinnakerbot remove-label to-be-closed

[spinnakerbot]

This issue is tagged as 'to-be-closed' and hasn't been updated in 45 days, so we are closing it. You can always reopen this issue if needed.

[spinnakerbot]

This issue is tagged as 'to-be-closed' and hasn't been updated in 45 days, so we are closing it. You can always reopen this issue if needed.