NationTech/harmony
5
0
Fork 2
Code Issues 40 Pull Requests 13 Actions Packages Projects Releases Wiki Activity

WIP: feat(update default ingress class): score to update default ingress class to use trusted CA cert #158

Closed
wjro wants to merge 4 commits from feat/okd_default_ingress_class into master
pull from: feat/okd_default_ingress_class
merge into: NationTech:master
Conversation 1 Commits 4 Files Changed 3 +297
wjro commented 2025-09-12 20:06:14 +00:00
Owner
Copy Link

built basic structure for the score to update the default ingress class in an okd cluster. Updating the default ingress to use a ca cert allows dynamically provisioning tls certificates for ingresses.
Also added quality of life function to check if a deployment exists using the k8sclient.

built basic structure for the score to update the default ingress class in an okd cluster. Updating the default ingress to use a ca cert allows dynamically provisioning tls certificates for ingresses. Also added quality of life function to check if a deployment exists using the k8sclient.
wjro added 1 commit 2025-09-12 20:06:14 +00:00
wip(update-ingress): built basic structure for the okd commands to update the default ingress to allow dynamically provisioning tls certificates for ingresses added quality of life function to check if a deployement exists using the k8sclient
All checks were successful
Run Check Script / check (pull_request) Successful in 57s
Details
41f1bca69c
johnride commented 2025-10-21 13:51:03 +00:00
Owner
Copy Link

Context : private cloud

Private cloud operators will like exposing automatically ingress ressources in the internal network with the default router. This router is generally also exposed publicly, which means that all ingresses will be reachable publicly if the HOST header is correct.

I think this behavior has serious enough implications to validate with customers what behavior they like.

Context : private cloud Private cloud operators will like exposing automatically ingress ressources in the internal network with the default router. This router is generally also exposed publicly, which means that all ingresses will be reachable publicly if the HOST header is correct. I think this behavior has serious enough implications to validate with customers what behavior they like.
wjro closed this pull request 2025-10-22 15:36:47 +00:00

Pull request closed

Please reopen this pull request to perform a merge.
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
Architecture Decision Record
Good first issue
RFC
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
johnride jvtrudel letian stremblay wjro
No Assignees
2 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: NationTech/harmony#158
No description provided.
Delete Branch "feat/okd_default_ingress_class"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?