Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[FEATURE] Secure connections to Redfish APIs end-to-end #47

Open
starbops opened this issue Dec 22, 2024 · 0 comments
Open

[FEATURE] Secure connections to Redfish APIs end-to-end #47

starbops opened this issue Dec 22, 2024 · 0 comments
Labels
area/redfish Front-end protocol related and it's Redfish component/agent Relevant to the virtualized BMCs kind/feature New feature proposed/asked

Comments

@starbops
Copy link
Owner

Is your feature request related to a problem? Please describe.

Some might not want to add an ingress controller to their K8s cluster. They can manually have kube-vip deployed and modify each of the virtbmc Cluster-type Services they want to expose externally to become the LoadBalancer-type, much like #3 described. Nevertheless, the connection will be plain text (regarding Redfish). As a result, we need to take care of these people and enable KubeVirtBMC's agent to handle HTTPS connections directly. That is to say, users can expose Redfish APIs through LoadBalancer-type Services externally without needing an ingress controller, and the connections are fully encrypted, end to end.

Describe the solution you'd like

The Redfish emulator should be able to handle HTTPS connections natively, which implies managing its key and certificate.

Describe alternatives you've considered

Access the APIs through an ingress controller, much like we do currently.

Additional context

This is also one of the remaining items from #2.

@starbops starbops added kind/feature New feature proposed/asked area/redfish Front-end protocol related and it's Redfish labels Dec 22, 2024
@starbops starbops added this to the Support Redfish - Phase 3 milestone Jan 3, 2025
@starbops starbops added the component/agent Relevant to the virtualized BMCs label Jan 3, 2025
@starbops starbops moved this to Backlog in KubeVirtBMC project Jan 3, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area/redfish Front-end protocol related and it's Redfish component/agent Relevant to the virtualized BMCs kind/feature New feature proposed/asked
Projects
Status: Backlog
Development

No branches or pull requests

1 participant