Skip to content

Commit a485bdd

Browse files
committed
Remove SPIRE option; agent can't call it
1 parent 8af01cf commit a485bdd

File tree

1 file changed

+0
-2
lines changed
  • docs/proposals/control-data-plane-split

1 file changed

+0
-2
lines changed

docs/proposals/control-data-plane-split/README.md

Lines changed: 0 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -153,8 +153,6 @@ default, NGF should generate the default certificates and keypair during install
153153

154154
Using cert-manager may also be an easy option to reduce the burden of installing and rotating Secrets. A user would need to install this before NGF, and ensure they create agent Secrets before deploying their Gateway resource. We could also tie the NGF control plane directly into cert-manager so that our control plane could create the agent Secrets for the user when they create a Gateway resource, further reducing the burden on the user.
155155

156-
Or we could use SPIRE, which might automate all of this. Potential downside is the need for `hostPath` mounting, which is a security concern.
157-
158156
#### Certificate Rotation
159157

160158
Kubernetes automatically updates mounted Secrets when the content changes, but the control plane

0 commit comments

Comments
 (0)