As part of Epic ISCE-794, we added the HAproxy Passthrough option, but there was no possibility of re-encryption. Problem: Customers have requested that we implement full TLS/SSL encryption from the client to the RGW service. Goal: Provide configurable options for the customer, where he can choose to re-encrypt or do a passthrough at the ingress/haproxy level. This way, we can support out-of-the-box full TLS/SSL encryption from the client to the RGW for customers who require it. Testing has already been done by QE on this RH Jira: https://issues.redhat.com/browse/RHCEPHQE-12976 Where they have tested successfully doing re-encryption.
Please specify the severity of this bug. Severity is defined here: https://bugzilla.redhat.com/page.cgi?id=fields.html#bug_severity.
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (Important: Red Hat Ceph Storage 8.1 security, bug fix, and enhancement updates), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHSA-2025:9775