DevFW-CICD/ingress-nginx-helm
6
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Add tls session ticket key setting

Browse source
This commit is contained in:
Manuel de Brito Fontes 2017-10-08 19:37:19 -03:00
parent cab6cd21b2
commit 29c0304921
4 changed files with 27 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

13
pkg/nginx/controller/nginx.go
View file

@ -18,6 +18,7 @@ package controller
import (
"bytes"
"encoding/base64"
"errors"
"fmt"
"io/ioutil"
@ -480,7 +481,17 @@ func (n *NGINXController) SetConfig(cmap *apiv1.ConfigMap) {
}
}
n.backendDefaults = ngx_template.ReadConfig(m).Backend
c := ngx_template.ReadConfig(m)
if c.SSLSessionTicketKey != "" {
d, err := base64.StdEncoding.DecodeString(c.SSLSessionTicketKey)
if err != nil {
glog.Warningf("unexpected error decoding key ssl-session-ticket-key: %v", err)
c.SSLSessionTicketKey = ""
}
ioutil.WriteFile("/etc/nginx/tickets.key", d, 0644)
}
n.backendDefaults = c.Backend
}
// SetListers sets the configured store listers in the generic ingress controller