Skip to content

Support BackendTLSPolicy SubjectAltNames #3152

Open
@sjberman

Description

@sjberman

As an NGF user,
I want to specify Subject Alternative (SAN) names for my backends,
So that I can allow multiple alternative names to be present in the backend certificate.

Note: this may not actually be possible with nginx to support a list of SANs. See kubernetes-sigs/gateway-api#3591 which is changing this field to extended for this reason.

We still may want to investigate.

Acceptance

  • Support the SubjectAltNames field in the BackendTLSPolicy

Metadata

Metadata

Assignees

No one assigned

    Labels

    area/securityFor security best practicesenhancementNew feature or request

    Type

    No type

    Projects

    Status

    🆕 New

    Milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions