Trust bundles
Trust bundles are collections of root certificates that a client or a server trusts. EDA uses root certificates to sign generated certificates before distributing them to applications or nodes. EDA applications use these root certificates to validate the authenticity of the certificates presented by a Transport Layer Security (TLS) peer during a TLS handshake.
- internal issuer
- API issuer
- node issuer
Trust bundles are distributed to EDA components using the CertManager
Bundle
CR. The Bundle
CR allows a user to create a trust
bundle from multiple sources (ConfigMaps, Secrets) and make them available to an
application through a different ConfigMap than the sources.
During installation, applications that need to use trust bundles can mount the resulting ConfigMap to have access to the assembled trust bundle.