Skip to:

  1. Skip to Jira Navigation
  2. Skip to Side Navigation
  3. Skip to Main Content

Allow enabling/disabling TLS in a running cluster

Description

Currently users need to do manual work to enable/disable TLS in a running cluster.

 

To disable TLS in a running cluster you need to do the following manually:

  1. Pause cluster

  2. Set spec.unsafeFlags.tls=true and spec.tls.enabled=false

  3. Delete SSL secrets

  4. Unpause cluster

To enable TLS in a running cluster:

  1. Pause cluster

  2. Set spec.unsafeFlags.tls=false and spec.tls.enabled=true

  3. Unpause cluster

 

These can be automated.

Environment

None

Activity

Julio Pasinatto December 10, 2024 at 8:20 PM

Verified, but we have a limitation:
If cluster is paused and spec.tls.enabled is changed and cr is applied, the cluster will be automatically unpaused.

https://perconadev.atlassian.net/browse/K8SPXC-1527

Done

Details

Assignee

Reporter

Labels

Needs QA

Yes

Needs Doc

Yes

Story Points

Sprint

Fix versions

Priority

Smart Checklist

Created July 4, 2024 at 7:10 AM
Updated December 19, 2024 at 8:11 PM
Resolved December 16, 2024 at 3:09 PM

Flag notifications