Azure / Azure/aksArc

Separate custom certificate bundle deployment from proxy / no_proxy configs

Open
#301 1 comment 0 reactions 0 assignees View on GitHub
Enhancement
Dominant language
PowerShell
Stars
118
Forks
63
PR merge metrics
No merged PRs in 30d

Description

**Separate functionality for deploying custom root CA certs to worker nodes from Proxy**

**Description**:
We do not use Proxy and No_Proxy anymore but have our own root CA and intermediate certs in use to access internal services. To be able to pull container images from our own internal registry we need to have a bundle of certificates deployed to the cluster nodes.

So far we used these features to deploy and update these certificates:
[Configure proxy settings with a certificate](https://learn.microsoft.com/en-us/azure/aks/hybrid/reference/ps/new-akshciproxysetting#configure-proxy-settings-with-a-certificate)
`$proxySetting=New-AksHciProxySetting -name "certificates" -certFile c:\\file.crt`
[Update certificate bundle on container hosts](https://learn.microsoft.com/en-us/azure/aks/hybrid/update-certificate-bundle)
`Set-AksHciProxySetting -noProxy "" -certFile c:\\file.crt`

After issues caused by touching proxy and no-proxy configs we can't use these features anymore to deploy our certs to the nodes.
Feature request: Please separate the functionality of custom certificate deployment from Proxy configs.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.