GitHub issue:

https://github.com/openshift/openshift-docs/issues/42343 

In serverless/admin_guide/serverless-ossm-setup.adoc, in the section Creating a certificate to encrypt incoming external traffic the following prerequisites needs to be extended:

> You have installed the OpenShift Serverless Operator and Knative Serving.

needs to be replaced with:

> You have installed the OpenShift Service Mesh Operator and a `ServiceMeshControlPlane` resource in a namespace `istio-system`. If you want to use the mTLS functionality, this must be enabled (field `.spec.security.dataPlane.mtls` set to `true`). OpenShift Serverless with Service Mesh only is supported for use with Red Hat OpenShift Service Mesh version 2.0.5 or higher.

The following item in section "Integrating Service Mesh with OpenShift Serverless" needs to be removed:

• Create a ServiceMeshControlPlane object in the istio-system namespace. If you want to use the mTLS functionality, this must be enabled for the istio-system namespace.

In the "Prerequisite" section, the item about OpenShift ServiceMesh should be removed with the wording as above about the OpenShift Service Mesh Operator.

Not related to the bug, but this would be a nice improvement (while you are on it):

In the admonition (1) of the gateway example, add some more explanation:

• (1) Add the name of the secret holding the wildcard certificate that you have created in the first step. ("wildcard-certs" in the example above)

I'm not sure since which OSS version this needs to be fixed, so can't set "affected version". I found the issue in 4.9 but suspect other OCP versions are affected, too.

rhn-support-knakayam could you give the proposed fix a quick review ? That would be great !