Skip to content

Commit

Permalink
feat: enable certificates relation on istio-pilot
Browse files Browse the repository at this point in the history
Enabling the certificates relation enables the integration with tls-certificates-operator
and other charms that provide CA certificates. These CA certificates are used by istio-pilot
to configure TLS on the ingress Gateway resource.
In the past this was done exclusively via charm configuration, which is now removed in favour
of CA certificates provided through the certificates relation.
  • Loading branch information
DnPlas committed Sep 28, 2023
1 parent 8b80a62 commit 8037c86
Show file tree
Hide file tree
Showing 4 changed files with 461 additions and 36 deletions.
14 changes: 0 additions & 14 deletions charms/istio-pilot/config.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -19,17 +19,3 @@ options:
type: string
default: istio-ingressgateway-workload
description: Name of the service created by istio-gateway to use as a Gateway
ssl-crt:
type: string
default: ''
description: |
Base-64 certificate output. Can be set as follows:
$ juju config ssl-crt="$(cat CERT_FILE | base64 -w0)"
or on the bundle with: "include-base64://"
ssl-key:
type: string
default: ''
description: |
Base-64 key output. Can be set as follows:
$ juju config ssl-key="$(cat CERT_FILE | base64 -w0)"
or on the bundle with: "include-base64://"
Loading

0 comments on commit 8037c86

Please sign in to comment.