[cluster-local-domain-tls] host cluster-local certificates with SNI in net-gateway-api
- Dominant language
- Go
- Stars
- 6.1k
- Forks
- 1.2k
- Avg merge
- 2d 7h
- Merged PRs (30d)
- 2
Description
## Context
Vision: https://github.com/knative/serving/pull/14213.
Each net-* implementation needs to grab and host all cluster-local certificates using SNI and return those certificates to the caller.
## Prerequisites
The following tasks have to be done upfront:
- https://github.com/knative/serving/issues/14216
- https://github.com/knative/serving/issues/14217
- Blocker: Gateway-API upstream needs to support this in the first place
## Work
- net-gateway-api needs to read the internal `KnativeCertificates` and host those using SNI on the cluster-local listener.
Contributor guide
Research direction
Start by reviewing net-gateway-api's handling of the internal KnativeCertificates and the cluster-local listener. Confirm that the prerequisite issues are complete and that Gateway API supports the required behavior. Done means all cluster-local certificates are hosted with SNI and returned to the caller.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- go, kubernetes
- Domain
- networking
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100