File tree Expand file tree Collapse file tree 1 file changed +6
-5
lines changed
content/zh/docs/tasks/traffic-management/ingress/secure-ingress Expand file tree Collapse file tree 1 file changed +6
-5
lines changed Original file line number Diff line number Diff line change 538
538
539
539
{{< tab name="Gateway API" category-value="gateway-api" >}}
540
540
541
- 因为 Kubernetes Gateway API 目前不支持
542
- [ Gateway] ( https://gateway-api.sigs.k8s.io/references/spec/#gateway.networking.k8s.io/v1.Gateway )
543
- 中的双向 TLS 终止,所以我们使用 Istio 特定的选项 ` gateway.istio.io/tls-terminate-mode: MUTUAL ` 来配置它:
541
+ 添加对包含 CA 证书的带有 ` ca.crt ` 或 ` cacert ` 键的 ConfigMap 或 Secret 的引用。
544
542
545
543
{{< text bash >}}
546
544
$ cat <<EOF | kubectl apply -f -
@@ -560,8 +558,11 @@ spec:
560
558
mode: Terminate
561
559
certificateRefs:
562
560
- name: httpbin-credential
563
- options:
564
- gateway.istio.io/tls-terminate-mode: MUTUAL
561
+ frontendValidation:
562
+ caCertificateRefs:
563
+ - group: ""
564
+ kind: Secret
565
+ name: httpbin-credential
565
566
allowedRoutes:
566
567
namespaces:
567
568
from: Selector
You can’t perform that action at this time.
0 commit comments