Currently, deploy-app.sh includes a section that configures Istio to use Istio supplied certificates:
|
kubectl create secret generic cacerts -n istio-system \ |
|
--from-file=${SRC_PATH}/istio-${ISTIO_VERSION}/samples/certs/ca-cert.pem \ |
|
--from-file=${SRC_PATH}/istio-${ISTIO_VERSION}/samples/certs/ca-key.pem \ |
|
--from-file=${SRC_PATH}/istio-${ISTIO_VERSION}/samples/certs/root-cert.pem \ |
|
--from-file=${SRC_PATH}/istio-${ISTIO_VERSION}/samples/certs/cert-chain.pem |
It would be helpful to add steps that facilitate creating and using self-generated certificates.