GoogleCloudPlatform/pci-gke-blueprint

Add steps for creating TLS certificates for Istio

Opened this issue · 0 comments

Currently, deploy-app.sh includes a section that configures Istio to use Istio supplied certificates:

kubectl create secret generic cacerts -n istio-system \
--from-file=${SRC_PATH}/istio-${ISTIO_VERSION}/samples/certs/ca-cert.pem \
--from-file=${SRC_PATH}/istio-${ISTIO_VERSION}/samples/certs/ca-key.pem \
--from-file=${SRC_PATH}/istio-${ISTIO_VERSION}/samples/certs/root-cert.pem \
--from-file=${SRC_PATH}/istio-${ISTIO_VERSION}/samples/certs/cert-chain.pem

It would be helpful to add steps that facilitate creating and using self-generated certificates.