Cannot use custom issuer to generate tls certificate

[konoox]

Proposal

As far as I know, the CR definition of Percona MongoDB cluster does not provide any configuration attribute to use an existing custom Issuer to generate the tls certificate with cert-manager. A <cluster-name>-psmdb-issuer issuer resource is automatically generated by the operator, then <cluster-name>-ssl and <cluster-name>-ssl-internal certificate resources are issued from it.

The Percona XtraDB cluster provide the tls.issuerConf attributes to specify a custom Issuer for these certificates to be generated.

It would be a great feature to implement this as well for the future releases of Percona MongoDB operator if not planned yet !

Use-Case

No response

Is this a feature you are interested in implementing yourself?

No

Anything else?

No response

[DevBey]

@konoox,

that's correct,

but for using custom issueer, we can actually create certificates ourselves with the approrpiate DNS and provide the secret name like this

ssl: my-custom-ssl