EMCO CA Cert distribution to edge cluster
Provide feature to onboard and distribute a common CA cert chain to Istio service mesh in edge clusters.
- Design an EMCO controller and API to onboard/generate a common CA cert chain to be distributed to Istio service mesh in edge clusters
- Design the interactions of the new EMCO controller, other EMCO microservices and resources and cert-manager and Istio to accomplish the distributions of the common CA cert chain to the edge clusters.
- Implement the new EMCO controller and demonstrate end to end function of single common CA cert chain to edge clusters.
The above work may expose additional work that is required in various components to fully automate this capability. Resolving issues to fully automate and extending the implementation to support distribution of multiple CA cert chains (i.e. to support 'tenants' with different CA cert chains) will occur in following releases.
Edited by Eric Multanen