TLS for the containerd and registry cache communication

[ialidzhikov]

How to categorize this issue?

/area security
/kind enhancement

What would you like to be added:
Right now the deployed registry caches server requests over plain http. We could potentially use https to prevent any Man-in-the-middle attacks.

The registry does not reload the certificates when they are changed on the file system: distribution/distribution#3712

Why is this needed:
See above.

Tasks:

• Configure TLS communication between registry cache and containerd #245
• Add TM test for CA rotation (we cannot add e2e test): Add CA rotation TM test #285

[ialidzhikov]

/reopen
for the e2e test

[gardener-prow]

@ialidzhikov: Reopened this issue.

In response to this:

/reopen
for the e2e test

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[ialidzhikov]

I am closing this one as all subtasks are completed.

/close

[gardener-prow]

@ialidzhikov: Closing this issue.

In response to this:

I am closing this one as all subtasks are completed.

/close

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.