Router SSL configuration: allow specification of SSL session ticket key

[Cryptophobia]

From @james-thimont-bcgdv on February 18, 2016 11:16

If we want to scale the NGINX instance to more than one instance and use SSL session tickets, each instance must have the same key.

Could you add that to the router annotation configuration?

Or even better could Deis automatically rotate the keys?
https://blog.twitter.com/2013/forward-secrecy-at-twitter-0

Copied from original issue: deis/router#122

[Cryptophobia]

From @felixbuenemann on August 9, 2016 20:13

I noticed the same. This could probably be handled by storing the session key into a secret then this secret could be updated and nginx would reload the configuration. Rotating the keys could then be scripted using kubectl or the kubernetes api.