Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support sslSecretName/sslSecretNameInteral also for haproxy #1814

Open
schegi opened this issue Sep 4, 2024 · 0 comments
Open

Support sslSecretName/sslSecretNameInteral also for haproxy #1814

schegi opened this issue Sep 4, 2024 · 0 comments

Comments

@schegi
Copy link

schegi commented Sep 4, 2024

Proposal

Currently usage of TSL with distinged certs for internal and external communication is only supported if proxysql is used as load balancing service. Support this also for the use of haproxy (add tls termination (external) to frontend and tls configuration (internal) to backend.

Use-Case

For managing cluster access with teleport, we need to set a distinged TLS cert set for external communication. Teleport defaults such cert wot server purpose, this again makes them useless for internal use (client purpose is also required).

Is this a feature you are interested in implementing yourself?

Maybe

Anything else?

No response

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant