Comments (7)
/unassign @BobyMCbobs
from net-istio.
This issue is stale because it has been open for 90 days with no
activity. It will automatically close after 30 more days of
inactivity. Reopen the issue with /reopen
. Mark the issue as
fresh by adding the comment /remove-lifecycle stale
.
from net-istio.
/remove-lifecycle stale
from net-istio.
Hi @BobyMCbobs
net-istio has two TLS setup
a) Manually adding a TLS certificate
b) Enabling auto-TLS certs
I assume that you want to add the default TLS cert for b) but then I guess it is a little bit difficult for net-istio.
Unlike Contour, Istio's Gateway does not support cross namespace secret[1][2]. Thereforce, we need to deploy secrets in every single namespace where net-istio generated the Gateway.
Contour can deploy the default secret in "some-admin-namespace", though.
Sorry if you have any other good solution but I just leave my comment here.
[1] istio/istio#14598 (comment)
[2] https://istio.io/latest/docs/reference/config/networking/gateway/#ServerTLSSettings (Only credentialName
is available)
from net-istio.
Hi @BobyMCbobs
net-istio has two TLS setup a) Manually adding a TLS certificate b) Enabling auto-TLS certs
I assume that you want to add the default TLS cert for b) but then I guess it is a little bit difficult for net-istio.
@nak3, thank you for your reply.
Yeah this is correct.
Ideally make it so that it uses a given TLS cert by default for a hostname wildcard and for anything else it uses net-certmanager.
I think I may need to write something custom for that functionality though.
Perhaps even a MutatingWebhookConfiguration could do it 🤔
Unlike Contour, Istio's Gateway does not support cross namespace secret[1][2]. Thereforce, we need to deploy secrets in every single namespace where net-istio generated the Gateway.
Contour can deploy the default secret in "some-admin-namespace", though.
When I used Contour, this was something I also implemented
Sorry if you have any other good solution but I just leave my comment here.
[1] istio/istio#14598 (comment) [2] https://istio.io/latest/docs/reference/config/networking/gateway/#ServerTLSSettings (Only
credentialName
is available)
from net-istio.
This issue is stale because it has been open for 90 days with no
activity. It will automatically close after 30 more days of
inactivity. Reopen the issue with /reopen
. Mark the issue as
fresh by adding the comment /remove-lifecycle stale
.
from net-istio.
Related Issues (20)
- Test Istio release "Istio 1.16.2"
- Test Istio release "Istio 1.15.5"
- Support system-internal-tls in net-istio HOT 4
- switch to Istio v1beta1 API
- Use ambient mesh instead of current sidecar mesh for CI HOT 1
- Is the mesh virtual service duplicate when knative-local-gateway is used? HOT 4
- Customize Istio Virtual Service `spec.gateways` via Kservice HOT 15
- Bump Kind and Go Versions in Kind e2e testing
- Bump Istio to v1.19 HOT 2
- Use istio v1.19 manifests
- Test Istio's 1.20 ExternalName Changes HOT 4
- Bump min k8s version to v1.27
- New configuration format HOT 2
- Filtering on external istio gateway
- How to remove the knative-local-gateway? HOT 3
- `DomainMapping` creates configuration that routes through the local gateway HOT 1
- Allow `STRICT` mode in the knative-serving namespace HOT 5
- Bump e2e cluster version to 1.28
- Do the gateway service parsing while parsing the configuration HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from net-istio.