Uploaded image for project: 'OpenShift Service Mesh'
  1. OpenShift Service Mesh
  2. OSSM-3180

[DOC] Integration of cert-manager with Service-Mesh

XMLWordPrintable

      How to integrate cert-manager with OSSM:

      • Customer want to use cert-manager as an issuer
      • they wont use the self-signed certificates that the mesh uses by default
      • We need a own certificate provider that generates certificate
        so cu configured in this way 
        certificateAuthority:
  type: Custom
  custom:
    address: cert-manager-istio-csr.cert-manager.svc:443
      • However, istiod still uses a self-signed certificated for the communication from gateway – virtual-service.
      • They want istio itself also request a certificate from cert-manager.
        However customer achieved the integration but wants to here from engineer side best and possible way.....

       

      Upstream resources that Praneeth found.

      https://cert-manager.io/docs/

      https://cert-manager.io/docs/tutorials/istio-csr/istio-csr/

      https://www.jetstack.io/blog/cert-manager-istio-integration/

      https://medium.com/@gregoire.waymel/istio-cert-manager-lets-encrypt-demystified-c1cbed011d67

          1.
          		 Review new feature checklist Sub-task Closed Major Unassigned

              rhn-support-gmonahan Gwynne Monahan
              rkratky@redhat.com Robert Krátký (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              8 Start watching this issue

                Created:
                Updated:
                Resolved: