TLS secret specification

[jakubdyszkiewicz]

Hey,

In the Listener TLS spec, there is a field called CertificateRefs. However, it is not specified what is the standard format that should be supported.

CertificateRefs can reference to standard Kubernetes resources, i.e. Secret, or implementation-specific custom resources.

Support: Core - A single reference to a Kubernetes Secret
Support: Implementation-specific (More than one reference or other resource types)

Should we support Secrets of a type kubernetes.io/tls as Core support?

Thanks!

[youngnick]

Thanks for this @jakubdyszkiewicz, we should definitely indicate what types are required.

[hbagdi]

Yes, the intention of Support: Core - A single reference to a Kubernetes Secret was to support kubernetes.io/tls since that is a standard that other k8s projects understand (such as cert-manager). We need to use the standard to make sure that the feature is portable (requirement for the core conformance level).

@jakubdyszkiewicz Would you be up for sending a PR to clarify that?

[jakubdyszkiewicz]

Created a PR #1084