Clientauth for services

This is more a feature request than an issue.

I know it is possible to use client certificate base authentication within OpenShift, for example while logging into the console or using the API endpoint.
What I am trying to achieve is the use of clientauth for services. I know it is possible to tell OpenShift to pass SSL connections to the pods and have them do the ssl handshake and - if needed - client certificate authentication. But this involves setting up the whole thing inside the pods.
In my scenario this would mean setting up a haproxy that does the job inside the container. From my point of view it would be better if "the platform" could handle this.

I have seen that it is possible to deploy customized routers to OpenShift, but I found no way of setting up haproxy specific configuration for handling clientauth in the templates that are there for set up.

Start with the customized router and HAProxy configuration templates mentioned in the issue, and trace how TLS connections are passed to services or pods. Define the configuration and termination behavior needed for client-certificate authentication; done requires an agreed platform-level design and validation path, which the issue does not currently specify.