Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support for choosing the ingress class per component? #190

Open
arner opened this issue Apr 17, 2024 · 0 comments
Open

Support for choosing the ingress class per component? #190

arner opened this issue Apr 17, 2024 · 0 comments

Comments

@arner
Copy link

arner commented Apr 17, 2024

This would give the user more control over the networking policies and security.

Peers and orderers have to be exposed to the peers and orderers of the other organizations (either over a VPN or over the internet), but Certificate Authorities and the Console can usually stay private. And would be more secure to keep private. One way to manage it is to use two ingress controllers; one private and one public (or at least 'network public') - each of which exposed through a different loadbalancer with its own networking and firewall.

As far as I can tell it's not supported by the operator though; currently the ingressClass is hardcoded as nginx. Would it be possible (and feasible and desirable ;)) to make it configurable per component (e.g. supplying it in the config when deploying a peer)?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant