Feature request: define SNI value for ServerSSL in TLSProfile CRD #4001
Description
Title
Feature request: define SNI value for ServerSSL in TLSProfile CRD
Description
Feature request: it would help to have something like serverName as an attribute of serverSSLParams.
Actual Problem
When a serverSSL profile is created from a CRD, currently we cannot specify a SNI value. Only the renegotiationEnabled value can be set under serverSSLParams. My customer would like to set the SNI value in the SSL profile in the same way.
Solution Proposed
Setting the SNI value is already supported using AS3, so I think the best way to support with CIS would be a field called serverName as an attribute of serverSSLParams in a TLSProfile CRD.
- serverSSL profile: https://clouddocs.f5.com/products/extensions/f5-appsvcs-extension/latest/declarations/tls-encryption.html#using-matchtosni-with-a-tls-server-profile
Alternatives
Workarounds:
- you can pre-create the SSL profile on the BIG-IP and reference it with
reference: bigip - you could use AS3 and ConfigMap
Additional context
Thanks for all the work! This is for serverSSL profiles only (from BIG-IP to backend pool member).