Skip to content

Commit

Permalink
added cluster issuer docs
Browse files Browse the repository at this point in the history
  • Loading branch information
Taiwolawal authored Apr 2, 2024
1 parent 3c7813b commit 08f82de
Showing 1 changed file with 5 additions and 2 deletions.
7 changes: 5 additions & 2 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -112,12 +112,15 @@ We will install cert-manager and use letsencrypt to automatically obtain TLS cer

Ensure its deployed in istio-ingress namespace where you have the gateway pod

![apiVersion cert-manager iov1](https://github.com/Taiwolawal/istio-project/assets/50557587/f7d29bb4-5d6f-4be7-b631-f66a8a028811)

To automatically obtain TLS certificate from Letsencrypt we need to creat a cluster issuer. Ensure you specify the ingress class to use solve http01 challenge

When you create these certificate, the cert-manager will obtain a certificate from letsencrypt and store it in kubernetes secret. The certificate is valid for 90 days and the cert-manager will automatically renew and update the secret

![image](https://github.com/Taiwolawal/istio-project/assets/50557587/0d06ce3d-2807-409b-b1b1-b634f3661b72)


![apiVersion cert-manager iov1](https://github.com/Taiwolawal/istio-project/assets/50557587/f7d29bb4-5d6f-4be7-b631-f66a8a028811)

<img width="736" alt="Pasted Graphic 53" src="https://github.com/Taiwolawal/istio-project/assets/50557587/66b26201-d44b-4615-ac2f-9c3cddaefe51">

Now, we need to update the gateway file with port 443
Expand Down

0 comments on commit 08f82de

Please sign in to comment.