UNCLASSIFIED - NO CUI

Conditionally Create the SSO.Certificate_Authority value as a Kubernetes Secret

We already have a value for sso.certificate_authority and most applications when trusting a certificate not signed by a CA in the existing trust store need to have a PEM Certificate Authority fed in via a mounted Kubernetes secret.

Utilize this PEM CA Certificate we already utilize to create a kubernetes secret with this CA in each namespace that has <package>.sso.enabled=true .

Secret should look adhere to the following:

  • name: <standard_we_decide_on> (tls-ca-sso/oidc-ca-cert/oidc-ca ?)
  • PEM encoded CA certificate created inside single key like ca.pem