Skip to content

WIP: Use mutual SSL for Helm Tiller

What does this MR do?

As part of our move to support RBAC it will become increasingly important to lock down the permissions of Helm Tiller. As such we will use mutual SSL auth between Helm client and Tiller server with the keys only available to GitLab so users cannot authenticate to Tiller at all.

Are there points in the code the reviewer needs to double check?

  • Security, encrypting data in the database, passing data to Helm

Why was this MR needed?

Screenshots (if relevant)

Does this MR meet the acceptance criteria?

What are the relevant issue numbers?

#29398 (closed)

Edited by 🤖 GitLab Bot 🤖

Merge request reports