Skip to content

[minor] Support BYO ClusterIssuer#1983

Open
terc1997 wants to merge 10 commits intomasterfrom
issue-1812
Open

[minor] Support BYO ClusterIssuer#1983
terc1997 wants to merge 10 commits intomasterfrom
issue-1812

Conversation

@terc1997
Copy link
Contributor

@terc1997 terc1997 commented Dec 26, 2025

Related issues

Changes

  • Implement override for mas_cluster_issuer parameter.

Tests

Override without provider

Pasted Graphic Pasted Graphic 1

Override with provider - CIS

Pasted Graphic 3 Pasted Graphic 4

No override with no provider

Pasted Graphic 5 Pasted Graphic 6

No override with a provider - CIS

Pasted Graphic 7 Pasted Graphic 8

@terc1997 terc1997 requested a review from a team as a code owner December 26, 2025 14:26
@durera durera self-assigned this Dec 30, 2025
@terc1997 terc1997 requested a review from durera January 5, 2026 11:30
# Use MAS default self-signed cluster issuer with the default domain
self.setParam("dns_provider", "")
self.setParam("mas_domain", "")
self.setParam("mas_cluster_issuer", "")
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

What's the reason we don't need this set to empty here now, wouldn't we still want this set to "" in this case?

self.manualCertsDir = None
else:
# Configuring domain
if self.yesOrNo('Configure custom domain'):
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I find the current flow a bit confusing ...

Do you want to configure domain and cert management? No
Do you want to configure custom domain? Yes

Feel like most customers would have answered Yes to the first one, even if they wanted what's in the second path.

Think we should have a single path through this taking customers through the options, with a single prompt asking them to pick how they want to manage the certs:

if (Do you want to configure domain and cert management?)
    Configure custom domain

    Choose certificate management mode
    1. Certificate-Manager with DNS integration
    2. Certificate-Manager with existing ClusterIssuer
    3. Certificate-Manager with auto-generated self-signed certificate
    4. Manual certificate management

    > 

This can then be easily extended by @rawa-resul for his work to add support for Issuer as an alternative to ClusterIssuer.

@durera durera changed the title [patch] implement cluster issuer override [minor] Support BYO ClusterIssuer Feb 18, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants

Comments