Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add new annotation for using certificate name when configuring load balancer TLS #722

Merged
merged 5 commits into from
May 27, 2024

Conversation

bbassingthwaite
Copy link
Contributor

@bbassingthwaite bbassingthwaite commented May 15, 2024

This will improve the users experience when using a certificate. A name is easier to identify then a UUID. If they are using lets encrypt, the underlying UUID will change on each renewal which causes headaches for users. Certificate names are also now unique so we can identify a certificate by its name even if the underlying UUID has changed.

The existing certificate ID annotation will take precedence. If they specify a name, we will use the certificate API to look it up and get the certificate ID.

Copy link
Collaborator

@timoreimann timoreimann left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Overall, this looks like a good addition to me.

Could you please also update the annotation documentation and add a change log entry?

cloud-controller-manager/do/loadbalancers.go Outdated Show resolved Hide resolved
cloud-controller-manager/do/loadbalancers.go Outdated Show resolved Hide resolved
@bbassingthwaite bbassingthwaite force-pushed the bbass/LBAAS-3246/support-certificate-name branch from 04ae381 to b891e2b Compare May 21, 2024 22:00
@bbassingthwaite bbassingthwaite marked this pull request as ready for review May 21, 2024 22:00
…alancer TLS

This will improve the users experience when using a certificate. A name is easier to identify then a UUID. If they are using lets encrypt, the underlying UUID will change on each renewal which causes headaches for users. Certificate names are also now unique so we can identify a certificate by its name even if the underlying UUID has changed.
@bbassingthwaite bbassingthwaite force-pushed the bbass/LBAAS-3246/support-certificate-name branch from b891e2b to cf28ba5 Compare May 27, 2024 21:27
@bbassingthwaite bbassingthwaite merged commit f962af9 into master May 27, 2024
3 checks passed
@bbassingthwaite bbassingthwaite deleted the bbass/LBAAS-3246/support-certificate-name branch May 27, 2024 21:33
@timoreimann
Copy link
Collaborator

Fixes #573.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants