Skip to content

Latest commit

 

History

History
33 lines (22 loc) · 1.28 KB

v1beta1.md

File metadata and controls

33 lines (22 loc) · 1.28 KB

API - v1beta1

Server TLS

The gateway and admission controllers will only mutate TLS and manage certificates for v1beta1.Gateway resources that are labeled with the following:

labels:
    "v1beta1.kanopy-platform.github.io/istio-cert-controller-inject-simple-credential-name": "true"

When this label is set the controller will take over the TLS.CredentialName and install a certificate according to the default issuer set during Installation

A custom ClusterIssuers installed in your kubernetes cluster may be used per gateway with the annotation:

annotations:
    v1beta1.kanopy-platform.github.io/istio-cert-controller-issuer: my-cluster-issuer

Certificates

Certificates created by this controller will contain the following Managed label. Following standard controller convention, certificates with this label SHOULD NOT be manually edited.

The value of this label will consist of two parts:

  1. The resource name of the gateway
  2. The namespace where the gateway belongs
labels:
    v1beta1.kanopy-platform.github.io/istio-cert-controller-managed: name-of-gateway.namespace