knative / knative/serving

Evaluate support for cluster-trust-bundles

Open
#14,990 1 comment 1 reaction 0 assignees View on GitHub
lifecycle/frozen
Dominant language
Go
Stars
6.1k
Forks
1.2k
Avg merge
2d 7h
Merged PRs (30d)
2

Description

# Context
In https://github.com/knative/serving/issues/14609 we added support for configuring CA trust bundles via ConfigMaps. K8s 1.30 will start to support [cluster-trust-bundles](https://github.com/kubernetes/enhancements/tree/master/keps/sig-auth/3257-cluster-trust-bundles).

We should consider supporting them in the future. There has been a discussion on [this PR](https://github.com/knative/serving/pull/14717#discussion_r1473541048) on how this could be done (volumes vs. informers). As both approaches have pros and cons, we need to revisit this discussion.

Contributor guide

Open the contributing guide

Research direction

Start by reading issue 14609, the Kubernetes cluster-trust-bundles KEP, and the discussion on PR 14717 about volumes versus informers. The issue names no files or tests; done would require revisiting those approaches and establishing a concrete support direction for cluster-trust-bundles.

Written by the indexing model from the issue text.

Assessment

Tech stack
go, kubernetes
Domain
infrastructure, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.