c5924f54a1
Previously it wasn't possible to set a custom CA bundle for an ACME server, leading users to either patch the cert-manager system CA bundle manually or else use SkipTLSVerify which is a security issue. This adds CABundle for ACME, similar to what we have for Vault and Venafi TPP issuers. Longer term we'd like to have a more fully featured approach. It would for example make sense to support loading CA bundles from ConfigMaps or Secrets (similar to what we do for Vault issuers today), but for now this change is the simplest change. Signed-off-by: Ashley Davis <ashley.davis@jetstack.io> |
||
|---|---|---|
| .. | ||
| apis | ||
| cainjector/feature | ||
| controller | ||
| plugin | ||
| test/paths | ||
| vault | ||
| webhook | ||