8000 Consider supporting TLS certificate pinning · Issue #1191 · coreos/ignition · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content
Consider supporting TLS certificate pinning #1191
Open
@bgilbert

Description

@bgilbert

In some environments, a trusted Ignition config might fetch data or further configs over a less-trusted network. (For example, a bare metal node might be installed with a pointer config and then shipped to the field for initial provisioning.) To provide additional assurance, it might make sense to allow the config to pin the server TLS certificate for a Resource.

If you have a use case where this would help you, please comment with any details you can provide.

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions

      0