Skip to content

Commit 0ec66b5

Browse files
authored
fix: revert support cacert in tls.credentialNames (#16768)
1 parent 7a2583c commit 0ec66b5

File tree

1 file changed

+0
-2
lines changed
  • content/en/docs/tasks/traffic-management/ingress/secure-ingress

1 file changed

+0
-2
lines changed

content/en/docs/tasks/traffic-management/ingress/secure-ingress/index.md

Lines changed: 0 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -627,8 +627,6 @@ Istio supports reading a few different Secret formats, to support integration wi
627627
* A TLS Secret with keys `tls.key` and `tls.crt`, as described above. For mutual TLS, a separate generic Secret named `<secret>-cacert`, with a `cacert` key. For example, `httpbin-credential` has `tls.key` and `tls.crt`, and `httpbin-credential-cacert` has `cacert`.
628628
* A generic Secret with keys `key` and `cert`. For mutual TLS, a `cacert` key can be used.
629629
* A generic Secret with keys `key` and `cert`. For mutual TLS, a separate generic Secret named `<secret>-cacert`, with a `cacert` key. For example, `httpbin-credential` has `key` and `cert`, and `httpbin-credential-cacert` has `cacert`.
630-
* For mutual TLS, a separate generic Secret can be referenced in `tls.credentialNames` in the form of `<secret>-cacert`, with a `cacert` key. For example, `my-httpbin-mtls-trustbundle` has `cacert` and `tls.credentialNames` has `my-httpbin-mtls-trustbundle-cacert`.
631-
* For mutual TLS, a separate ConfigMap can be referenced in `tls.credentialNames` in the form of `configmap://<namespace>/<configmap>-cacert`, with a `cacert` key. For example, `my-httpbin-mtls-trustbundle` ConfigMap in `httpbin` namespace has `cacert` and `tls.credentialNames` has `configmap://httpbin/my-httpbin-mtls-trustbundle-cacert`.
632630
* The `cacert` key value can be a CA bundle consisting of concatenated individual CA certificates.
633631

634632
### SNI Routing

0 commit comments

Comments
 (0)