Skip to content

Commit d0b0cb4

Browse files
committed
Sync istio#16739 support GWAPI frontend validation into Chinese
1 parent 9baf373 commit d0b0cb4

File tree

1 file changed

+6
-5
lines changed
  • content/zh/docs/tasks/traffic-management/ingress/secure-ingress

1 file changed

+6
-5
lines changed

content/zh/docs/tasks/traffic-management/ingress/secure-ingress/index.md

Lines changed: 6 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -538,9 +538,7 @@ EOF
538538

539539
{{< tab name="Gateway API" category-value="gateway-api" >}}
540540

541-
因为 Kubernetes Gateway API 目前不支持
542-
[Gateway](https://gateway-api.sigs.k8s.io/references/spec/#gateway.networking.k8s.io/v1.Gateway)
543-
中的双向 TLS 终止,所以我们使用 Istio 特定的选项 `gateway.istio.io/tls-terminate-mode: MUTUAL` 来配置它:
541+
添加对包含 CA 证书的带有 `ca.crt``cacert` 键的 ConfigMap 或 Secret 的引用。
544542

545543
{{< text bash >}}
546544
$ cat <<EOF | kubectl apply -f -
@@ -560,8 +558,11 @@ spec:
560558
mode: Terminate
561559
certificateRefs:
562560
- name: httpbin-credential
563-
options:
564-
gateway.istio.io/tls-terminate-mode: MUTUAL
561+
frontendValidation:
562+
caCertificateRefs:
563+
- group: ""
564+
kind: Secret
565+
name: httpbin-credential
565566
allowedRoutes:
566567
namespaces:
567568
from: Selector

0 commit comments

Comments
 (0)