[GitHub] [pulsar-helm-chart] devinbost opened a new issue #79: Updating Helm chart to support GCP cert provider for TLS

[GitBox <gi...@apache.org>]

devinbost opened a new issue #79:
URL: https://github.com/apache/pulsar-helm-chart/issues/79


   Linking from Apache/Pulsar repo: https://github.com/apache/pulsar/issues/8457
   (I discovered that the issue probably should be filed here.)
   
   > In most production environments, using self-signed certs is not acceptable for TLS. Certs are expected to be backed by a CA for security reasons. It appears that the Pulsar Helm charts currently only support self-signed certificates.
   > The doc https://pulsar.apache.org/docs/en/helm-overview/ seems to suggest that the Helm chart also supports Let's Encrypt, but the Helm chart template appears to only accept "selfsigning" as a parameter: https://github.com/apache/pulsar-helm-chart/blob/master/charts/pulsar/templates/tls-cert-internal-issuer.yaml#L21
   > 
   > It would be helpful to also support GCP as a cert provider for TLS. This article has some information on using cert-manager with GCP: https://cert-manager.io/docs/configuration/acme/dns01/google/
   
   


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org