[Enhancement] Support configuring the TLS Secret on Ingress listener to enable cert-manager support for issuing certificates
See original GitHub issueIs your feature request related to a problem? Please describe.
Currently when using the Kubernetes Ingress external listener with Nginx Ingress controller, there is no way to specify a TLS secretName
, which would allow cert-manager
, for example, to issue certificates for the Ingress resources.
Describe the solution you’d like
When using the Kubernetes Ingress external listener with Nginx Ingress controller, I would like the ability to use cert-manager
to issue certificates for the created Ingress resources. To do this I would require a way to configure two properties:
- add annotations like
cert-manager.io/issuer
etc. - specify a
secretName
The first property is configurable using dnsAnnotations
, however, there doesn’t seem to be an option to specify the secretName
currently.
If the secretName
could be specified, it would allow certificates to be issued by cert-manager
for the created Ingress resources.
Issue Analytics
- State:
- Created 3 years ago
- Reactions:2
- Comments:9 (5 by maintainers)
Top GitHub Comments
Yes, correct.
As described in https://strimzi.io/blog/2021/05/07/deploying-kafka-with-lets-encrypt-certificates/, this should now be possible, although in slightly different way (the certificates need to be set in Kafka and not in Ingress due to the TLS passthrough). I think this can be closed.