Distribute trust across openMCP clusters #474
Description
Understand the Task
Description
A custom CA bundle should be available in most clusters of an openMCP landscape. There should be a controller which distributes it to all namespaces of the platform cluster as well as to other clusters.
This mechanism could be implemented as a platform service with the help of existing software such as cert-manager's trust-manager.
Any further valuable resources.
No response
What is required to accept the Task as done.
Done Criteria
- Custom CA bundle can be defined in a central location
- CA bundle is synchronized to all namespaces of the platform cluster
- CA bundle is synchronized to all namespaces of most other clusters belonging to the landscape (purpose filter)