Separate custom certificate bundle deployment from proxy / no_proxy configs
- Dominant language
- PowerShell
- Stars
- 118
- Forks
- 63
- PR merge metrics
- No merged PRs in 30d
Description
**Separate functionality for deploying custom root CA certs to worker nodes from Proxy**
**Description**:
We do not use Proxy and No_Proxy anymore but have our own root CA and intermediate certs in use to access internal services. To be able to pull container images from our own internal registry we need to have a bundle of certificates deployed to the cluster nodes.
So far we used these features to deploy and update these certificates:
[Configure proxy settings with a certificate](https://learn.microsoft.com/en-us/azure/aks/hybrid/reference/ps/new-akshciproxysetting#configure-proxy-settings-with-a-certificate)
`$proxySetting=New-AksHciProxySetting -name "certificates" -certFile c:\\file.crt`
[Update certificate bundle on container hosts](https://learn.microsoft.com/en-us/azure/aks/hybrid/update-certificate-bundle)
`Set-AksHciProxySetting -noProxy "" -certFile c:\\file.crt`
After issues caused by touching proxy and no-proxy configs we can't use these features anymore to deploy our certs to the nodes.
Feature request: Please separate the functionality of custom certificate deployment from Proxy configs.
Contributor guide
Assessment
This issue has not been assessed yet.