microsoft / microsoft/AzureTRE

SSL certificate installation and renewal process across TRE core and workspace endpoints

Open
#1,540 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

feature
Dominant language
Python
Stars
235
Forks
192
Avg merge
1d 23h
Merged PRs (30d)
13

Description

Description

As a Azure TRE Developer
I want to deploy and update custom SSL certificates across the TRE
So that my users trust the domain (rather than generic Azure) and they are always current and don't expire.

Acceptance criteria

  • #2186
  • Workspace ingress (such as to guacamole) uses a SSL certificate for a custom domain.
  • Certificates can be "updated" centrally and are updated where they are deployed.
  • Can request a certificate for a custom domain via Lets Encrypt
  • Can renew certificate or a custom domain via Lets Encrypt

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by reviewing the linked acceptance item #2186 and the requirements for workspace ingress and centrally updated certificates. Trace the TRE entry points that deploy certificates and define completion against the custom-domain, central-update, and Let's Encrypt request and renewal criteria.

Written by the indexing model from the issue text.

Assessment

Tech stack
azure
Domain
cloud, infrastructure, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.