UNCLASSIFIED - NO CUI

Skip to content
Snippets Groups Projects

Fix bug with credential set on all gateways

Merged Micah Nagel requested to merge passthrough-cred-fix into master

General MR

Summary

Istio TLS Mode supports 5 different options for your gateway. Only MUTUAL and SIMPLE actually support certs/credentials though. This can be confirmed by applying a gateway like this:

apiVersion: networking.istio.io/v1beta1
kind: Gateway
metadata:
  name: passthrough
  namespace: istio-system
spec:
  selector:
    app: passthrough-ingressgateway
  servers:
  - hosts:
    - test.bigbang.dev
    port:
      name: https
      number: 8443
      protocol: HTTPS
    tls:
      credentialName: passthrough-cert
      mode: SIMPLE

And then swapping the mode to the other 4 options. PASSTHROUGH type modes will throw a warning that the credential will be ignored. ISTIO_MUTUAL will actually error out.

Merge request reports

Loading
Loading

Activity

Filter activity
  • Approvals
  • Assignees & reviewers
  • Comments (from bots)
  • Comments (from users)
  • Commits & branches
  • Edits
  • Labels
  • Lock status
  • Mentions
  • Merge request status
  • Tracking
Please register or sign in to reply
Loading