Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Implement Certificate Hot Reloading #18

Open
ChaosInTheCRD opened this issue Nov 27, 2023 · 1 comment
Open

Implement Certificate Hot Reloading #18

ChaosInTheCRD opened this issue Nov 27, 2023 · 1 comment
Labels
enhancement New feature or request

Comments

@ChaosInTheCRD
Copy link

ChaosInTheCRD commented Nov 27, 2023

Describe the solution you'd like
Having spent some time working on an ExternalData Provider in the past, one thing that I spent some time on was working on hot reloading of certificates when they expire / are refreshed. From what I can tell it seems as though this would require the provider to be restarted.

Making sure that in the case of any of the certificates (provider's tls.crt/tls.key, gatekeeper's ca.crt) that the new certificates are loaded in would be a nice addition in my opinion 😄.

Some of this is mentioned in the Github issue here.

Anything else you would like to add:
I plan on completing some in progress work to refresh the cosign gatekeeper provider. It might be a good goal to try to standardise the code wherever possible for ease of future contribution? Just an idea.

@ChaosInTheCRD ChaosInTheCRD added the enhancement New feature or request label Nov 27, 2023
@ChaosInTheCRD
Copy link
Author

ChaosInTheCRD commented Nov 30, 2023

brief update on this:

I have spent some time this morning writing some code to efficiently handle the cert / key pair hot-reloading. It's looking good but I need to test it and I also need to figure out a way of handling the refreshing of the gatekeeper CA cert.

When I have completed it for cosign gatekeeper provider rewrite I will raise it in a WIP PR for this repo 😄 .

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

1 participant