Comments (3)
Figured out there's an inconsistency between the GitHub documentation and the GCP documentation
from gke-managed-certs.
GCP's Ingress can't do those types of redirects. You'll have to handle redirects from your own webserver unfortunately.
You'll have to create a separate ManagedCertificate for each domain given the current limitations on that. But your Ingress can terminate both of your domains. Might look something like:
apiVersion: extensions/v1beta1
kind: Ingress
metadata:
name: example-ingress
annotations:
kubernetes.io/ingress.global-static-ip-name: example-ip-address
networking.gke.io/managed-certificates: cert1,cert2
spec:
rules:
- host: domain.com
http:
paths:
- backend:
serviceName: your-service
servicePort: 80
- host: www.domain.com
http:
paths:
- backend:
serviceName: your-service
servicePort: 80
---
apiVersion: networking.gke.io/v1beta1
kind: ManagedCertificate
metadata:
name: cert1
spec:
domains:
- domain.com
---
apiVersion: networking.gke.io/v1beta1
kind: ManagedCertificate
metadata:
name: cert2
spec:
domains:
- www.domain.com
from gke-managed-certs.
Thank you! This is what I figured out, I just found the GCP documentation misleading, which says "Managed certificates support a single, non-wildcard domain"
from gke-managed-certs.
Related Issues (20)
- Multiple Certs not working: Only picks up the first managedcert in the list HOT 9
- Error with dependency HOT 9
- Configure an FQDN for the ingress controller IP address HOT 1
- Failing to provision: FAILED_NOT_VISIBLE HOT 2
- How to use use a cert with TLS 1.0? HOT 5
- My certificate is in FAILED_RATE_LIMITED status HOT 1
- Adding >15 certs to GKE ingress HOT 6
- When using a different class of ingress, certificate status is `FailedNotVisible` HOT 6
- FORBIDDEN error after certificate creation HOT 6
- FailedNotVisible for domains w/ DNS managed by CloudFlare (proxy) HOT 10
- Pre 0.4.2/GKE 1.16.8-gke.3: bug quickly re-creating a ManagedCertificate HOT 2
- the server could not find the requested resource (get managedcertificates.networking.gke.io aa-example-certificate) HOT 1
- Automatically delete certificates when cluster or ingress is shutdown HOT 9
- Errors you may encounter when upgrading the library HOT 3
- Support: What auto installs this? HOT 3
- Controller Hangs Acquiring Leader Lease HOT 1
- Adding domains to ManagedCertificate doesn't update the certificate HOT 2
- Incorrect documentation HOT 1
- Using ManagedCertificate with Gateway API HOT 3
- Any plans to support DNS Authorization? HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from gke-managed-certs.