[nginx] Support OCSP Stapling

[ConnorJC3]

Is this a request for help?: No

What keywords did you search in NGINX Ingress controller issues before filing this one?: OCSP stapling, ssl_stapling

---

Is this a BUG REPORT or FEATURE REQUEST?: FEATURE REQUEST

As far as I can tell ever since #4356 it is impossible to enable OCSP stapling because the certificates are handled in lua, and the current nginx-ingress lua implementation doesn't support OCSP. Even attempting to directly enable OCSP via putting ssl_stapling on; in a server snippet does not enable it.

Would it be possible to once again allow OCSP stapling with nginx-ingress? I don't have much experience with OpenResty but it seems like it can be done in lua (https://github.com/openresty/lua-resty-core/blob/master/lib/ngx/ocsp.md).

[fejta-bot]

Issues go stale after 90d of inactivity.
Mark the issue as fresh with /remove-lifecycle stale.
Stale issues rot after an additional 30d of inactivity and eventually close.

If this issue is safe to close now please do so with /close.

Send feedback to sig-testing, kubernetes/test-infra and/or fejta.
/lifecycle stale

[ConnorJC3]

/remove-lifecycle stale

Being worked on in #4864

[fejta-bot]

Stale issues rot after 30d of inactivity.
Mark the issue as fresh with /remove-lifecycle rotten.
Rotten issues close after an additional 30d of inactivity.

If this issue is safe to close now please do so with /close.

Send feedback to sig-testing, kubernetes/test-infra and/or fejta.
/lifecycle rotten

[ConnorJC3]

/remove-lifecycle rotten

Apparently I scuffed removing the label last time, still appears to have ongoing work (#5133)

[aledbf]

Closing. Fixed in #5133