Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Certificates] Allow the use of IX-Certificates #190

Closed
Ornias1993 opened this issue Feb 26, 2021 · 1 comment · Fixed by #191
Closed

[Certificates] Allow the use of IX-Certificates #190

Ornias1993 opened this issue Feb 26, 2021 · 1 comment · Fixed by #191
Assignees
Labels
enhancement New feature or request

Comments

@Ornias1993
Copy link
Member

Intro
This is basically a two-part PR together with #189, where #189 is about replacing Cert-Manager completely, this one is just about allowing the use of IX-Certificates

Is your feature request related to a problem? Please describe.
Currently we use Cert-Manager to handle certificate generation.
However, this creates a lot of abstraction and increases the maintenance of this Catalog significantly.

It would also mean we can offload things like documentation for the creation of certificates to TrueNAS/IX

In the past few weeks IX has release the option to use certificates from TrueNAS in Apps.
For the time being IX supports only route53 and acmeDNS as DNS01 providers, which isn't very usefull.

However, after some requests IX is working on wider support of DNS01 providers, which makes it more interesting to offload certificate generation to TrueNAS instead of doing it ourselves. See: truenas/middleware#6483

Doing so would also make it unneccisary to do #106 for the webUI.
Although we might still do it for other externalservices.(!)

Describe the solution you'd like
For now we can replace add a "IX-Certificate" option, which would allow the user to use a certificate loaded in TrueNAS.
In a later stage (after IX actually releases the UI part of the Certificate improvements) we can remove Cert-Manager and options related to it.

Describe alternatives you've considered
Staying with our own CertManager.
Which is really overdoing things if the integrated TrueNAS solution would suffice.

Additional Notes
This is basically a breaking change if fully completed and there possible would NOT be an easy migration path for users currently using Cert-manager. Users should be aware of that.

@truecharts-admin
Copy link
Collaborator

This issue is locked to prevent necro-posting on closed issues. Please create a new issue or contact staff on discord of the problem persists

@truecharts truecharts locked and limited conversation to collaborators Feb 10, 2023
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
enhancement New feature or request
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants