Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Investigate usage of TLS for object storage connection(s) #75

Closed
blancharda opened this issue Mar 27, 2024 · 5 comments
Closed

Investigate usage of TLS for object storage connection(s) #75

blancharda opened this issue Mar 27, 2024 · 5 comments
Assignees
Labels
bug Something isn't working MVP
Milestone

Comments

@blancharda
Copy link
Contributor

The gitlab (and other app) configuration(s) currently specify insecure mode, or explicit http connections. Look into adding the domain cert to nutanix Objects and configuring the apps appropriately

@blancharda blancharda added the bug Something isn't working label Mar 27, 2024
@blancharda blancharda added this to the 0.3.0 milestone Mar 27, 2024
@jacobbmay
Copy link
Collaborator

jacobbmay commented Apr 5, 2024

2 possible approaches for this.

  • Generate and upload certs for Nutanix Objects to use that are signed by a CA that is already trusted or being provided to applications to trust
  • Keep using Nutanix Objects generated certs and provide Objects CA to apps so they can trust Objects generated certs

First option requires Objects certs to be managed by something/someone and periodically replaced before they expire. Has potential for the certs to already be trusted if an environment can use certs that are signed by a public CA. Otherwise they could be signed by a private CA that is already being provided to applications.

Second option should enable Objects cert management to be automatic at the expense of the Objects CA needing to be provided to apps that use buckets.

@anthonywendt anthonywendt moved this from Todo to In Progress in swf-nutanix Issues Burndown Apr 10, 2024
@anthonywendt anthonywendt self-assigned this Apr 11, 2024
@blancharda blancharda added the MVP label May 16, 2024
@anthonywendt anthonywendt removed their assignment May 16, 2024
@anthonywendt anthonywendt moved this from In Progress to Todo in swf-nutanix Issues Burndown May 17, 2024
@JoeHCQ1
Copy link
Contributor

JoeHCQ1 commented Jun 17, 2024

Question - could we extend Istio's service mesh to include this? I believe you can include say a random EC2 instance in your service mesh, but I'm not sure that'd be extendable to however Nutanix exposes it's object storage.

@blancharda
Copy link
Contributor Author

however Nutanix exposes it's object storage

It's not a bad thought, but think you hit the issue on the head.
It miiiight be possible, but I think we would have to figure out how to add the nutanix hosts (and probably some other VMs) in order to accomplish it, which would probably introduce a fair bit of complexity.

@jacobbmay jacobbmay self-assigned this Jun 24, 2024
@jacobbmay jacobbmay moved this from Todo to In Progress in swf-nutanix Issues Burndown Jun 24, 2024
@jacobbmay
Copy link
Collaborator

Will be resolved as part of #133 currently in progress

@blancharda
Copy link
Contributor Author

Resolved with the introduction of trust-manager.
Velero is still outsanding, but is tracked in #144

@github-project-automation github-project-automation bot moved this from In Progress to Done in swf-nutanix Issues Burndown Jul 12, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working MVP
Projects
Status: Done
Development

No branches or pull requests

4 participants