Skip to content

Adding Tip not to enable global sds #5040

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
geeknoid merged 6 commits into from
Oct 3, 2019
Merged

Adding Tip not to enable global sds #5040

Changes from all commits
Commits
Show all changes
6 commits
Select commit Hold shift + click to select a range
cafc4d8
Adding Tip not to enable global sds
rjshrjndrn Sep 23, 2019
25f3148
Elaborating comment with error message.
rjshrjndrn Sep 23, 2019
28ddd35
fixing bash templating error
rjshrjndrn Sep 23, 2019
483a0da
Update content/en/docs/tasks/traffic-management/ingress/ingress-certm…
rjshrjndrn Sep 25, 2019
2337195
Fix for rare hugo issue on html rendering
rjshrjndrn Sep 26, 2019
d4ff36e
Fix: spelling mistake
rjshrjndrn Sep 26, 2019
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
9 changes: 9 additions & 0 deletions content/en/docs/tasks/traffic-management/ingress/ingress-certmgr/index.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -31,6 +31,15 @@ $ helm template $HOME/istio-fetch/istio \
By default `istio-ingressgateway` will be exposed as a `LoadBalancer` service type. You may want to change that by setting the `gateways.istio-ingressgateway.type` installation option to `NodePort` if this is more applicable to your Kubernetes environment.
{{< /tip >}}

{{< tip >}}
If you're editing the `values.yml` file, don't enable
{{<text_hack yaml>}}
sds:
enabled: false
{{</text>}}
This will enable mutual TLS between pods which will cause pods to become unhealthy if you don't have mutual TLS configured.
{{< /tip >}}

## Configuring DNS name and gateway

Take a note of the external IP address of the `istio-ingressgateway` service:
Expand Down