...
The default product setup for Vidispine Enterprise MAM is to do TLS termination on the ingress controllers. When using MetalLB in layer-2 mode this is the preferred way to go.
...
| Expand |
|---|
| title | Expanded Draw.io diagram view with the standard Confluence view. |
|---|
|
| Drawio |
|---|
| zoom | 1 |
|---|
| simple | 0 |
|---|
| inComment | 0 |
|---|
| pageId | 1588759405 |
|---|
| custContentId | 1588595789 |
|---|
| lbox | 1 |
|---|
| diagramDisplayName | TLS Termination On Ingress Controller |
|---|
| contentVer | 1 |
|---|
| revision | 1 |
|---|
| baseUrl | https://vidispine.atlassian.net/wiki |
|---|
| diagramName | TLS Termination On Ingress Controller |
|---|
| pCenter | 0 |
|---|
| width | 1098.0000000000002 |
|---|
| links | |
|---|
| tbstyle | |
|---|
| height | 603.0000000000002 |
|---|
|
|
...
When an external load balancer is used, TLS termination may be done by the load balancer. As updating the certificates is a regular task, this can then be done w/o touching the Kubernetes cluster.
...
| Expand |
|---|
| title | Draw.io diagram view with the standard Confluence view. |
|---|
|
| Drawio |
|---|
| zoom | 1 |
|---|
| simple | 0 |
|---|
| inComment | 0 |
|---|
| pageId | 1588759405 |
|---|
| custContentId | 1588726965 |
|---|
| lbox | 1 |
|---|
| diagramDisplayName | TLS Termination On External Load Balancer |
|---|
| contentVer | 1 |
|---|
| revision | 1 |
|---|
| baseUrl | https://vidispine.atlassian.net/wiki |
|---|
| diagramName | TLS Termination On External Load Balancer |
|---|
| pCenter | 0 |
|---|
| width | 1098 |
|---|
| links | |
|---|
| tbstyle | |
|---|
| height | 603 |
|---|
|
|
Certificate Requirements
The key building block for TLS termination are certificates. They serve two major purposes:
...
