[Feature] Support for Larger Certificate Chains
- Dominant language
- TypeScript
- Stars
- 2.1k
- Forks
- 395
- Avg merge
- 2d 22h
- Merged PRs (30d)
- 13
Description
**Is your feature request related to a problem? Please describe.**
Per https://github.com/Azure/azure-cli/issues/32000 - this seems to be reflective of a backend decision in AKS.
We are trying to add our Internal Certificate Authority to AKS and, the command fails because we have too many certificates.
````
scoronado@XXXXXXX:~/Desktop$ az aks update -g $NAME_OF_RG -n $NAME_OF_CLUSTER --custom-ca-trust-certificates $LARGE_CA_CRT
Only up to 10 new-line separated CAs can be passed, got 49 instead.
````
As you can tell, our Certificate Authority is very large and we have requirements to connect to different websites that are terminated with the public CA. There are, in fact 49 Certificates inside this file.
````
scoronado@XXXXXXX:~/Desktop$ grep "BEGIN CERTIFICATE" $LARGE_CA_CERT | wc -l
49
````
**Describe the solution you'd like**
We need AKS to accept the large Root CA given how we are also able to add a concatenated certificate file to `/usr/local/share/ca-certificates` on a Linux system with docker installed and move on.
**Describe alternatives you've considered**
We've been picking and choosing which CAs to add, sometimes adding the public cert of the site we are trying to pull images from using AKS, which is not practical given how our large government organization regularly refreshes the Root CAs.
**Additional context**
Add any other context or screenshots about the feature request here.
Contributor guide
Assessment
This issue has not been assessed yet.