1Password Connect Cannot Use Self-Signed Certs to Secure Internal Communications

[craigmiller160]

Summary

It is possible to configure the connector to expose its REST API using a self-signed certificate. However, it is not possible to configure the operator to trust that certificate.

Securing internal cluster communications is a valuable practice in 0-trust architectures. This kind of enhancements would be beneficial.

Use cases

Supporting 0-trust architectures where all communications, including intra-cluster ones, need to be TLS encrypted.

Proposed solution

I opened the following PR several months ago. It provides this functionality:

#200

Is there a workaround to accomplish this today?

No

References & Prior Work

N/A