openshift ssl route configuration with wild card certificate

11/27/2018

we use custom DNS configuration in openshift master, which uses a wild card certificatefor SSL. So when I am configuring secure route objects, I usually provide below options in route.yml,

tls:
caCertificate: <ca certificate>
certificate: <wildcard cert>
key: <wildcard cert key>
...

The problem I am facing currently is, since we use wild card certificate in the master for custom domain, for each application route.yml I am placing the cert and key. Any user who has access to the project can see these cert and key, that is not ideal and secure. Is there a way in route.yml, I can directly specify the master cert path? that way content of the cert and key are not exposed to the users

-- Hound
kubernetes
openshift
openshift-origin

0 Answers