-
Notifications
You must be signed in to change notification settings - Fork 1.4k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
feat: support set BackupStorageLocation(BSL) CA certificate #3167
Conversation
Signed-off-by: JenTing Hsiao <jenting.hsiao@suse.com>
Signed-off-by: JenTing Hsiao <jenting.hsiao@suse.com>
Signed-off-by: JenTing Hsiao <jenting.hsiao@suse.com>
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Tested it and it works.
Good point about not being able to remove the TLS from Velero. They'd need to edit the BSL CRD or delete it/recreate it. Maybe we can add a cmd for this later.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Only a couple minor changes that I'd request - rewording the changelog entry and removing the edits to the design doc, which aren't strictly necessary.
Signed-off-by: JenTing Hsiao <jenting.hsiao@suse.com>
Signed-off-by: JenTing Hsiao <jenting.hsiao@suse.com>
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM!
…anzu#3167) * Rename --cacert-file to --cacert in the CLI design doc Signed-off-by: JenTing Hsiao <jenting.hsiao@suse.com> * Add a new flag --cacert under `velero backup-location set` Signed-off-by: JenTing Hsiao <jenting.hsiao@suse.com> * Add changelog Signed-off-by: JenTing Hsiao <jenting.hsiao@suse.com> * Changelog rewording Signed-off-by: JenTing Hsiao <jenting.hsiao@suse.com> * Revert CLI design doc Signed-off-by: JenTing Hsiao <jenting.hsiao@suse.com>
…anzu#3167) * Rename --cacert-file to --cacert in the CLI design doc Signed-off-by: JenTing Hsiao <jenting.hsiao@suse.com> * Add a new flag --cacert under `velero backup-location set` Signed-off-by: JenTing Hsiao <jenting.hsiao@suse.com> * Add changelog Signed-off-by: JenTing Hsiao <jenting.hsiao@suse.com> * Changelog rewording Signed-off-by: JenTing Hsiao <jenting.hsiao@suse.com> * Revert CLI design doc Signed-off-by: JenTing Hsiao <jenting.hsiao@suse.com>
…anzu#3167) * Rename --cacert-file to --cacert in the CLI design doc Signed-off-by: JenTing Hsiao <jenting.hsiao@suse.com> * Add a new flag --cacert under `velero backup-location set` Signed-off-by: JenTing Hsiao <jenting.hsiao@suse.com> * Add changelog Signed-off-by: JenTing Hsiao <jenting.hsiao@suse.com> * Changelog rewording Signed-off-by: JenTing Hsiao <jenting.hsiao@suse.com> * Revert CLI design doc Signed-off-by: JenTing Hsiao <jenting.hsiao@suse.com>
Add a new flag
--cacert
undervelero backup-location set
to allow configures the CA certificate of BSL.In
velero install
andvelero backup-location create
, the flag is--cacert
.To make it compatible, change the CLI design doc from
--cacert-file
to--cacert
.The only drawback of this new flag proposal is that the user can't remove the
cacert
setting from velero CLI directly if the BSL changes it's setting from w/ TLS to w/o TLS.partial fixes #2425
ref to #2419