Otdfbt

What is the meaning of 'breadth' in breadth first search?

Trademark violation for app?

Crossing US/Canada Border for less than 24 hours

How did Fremen produce and carry enough thumpers to use Sandworms as de facto Ubers?

Is multiple magic items in one inherently imbalanced?

Project Euler #1 in C++

What makes a man succeed?

How to pronounce 伝統色

In musical terms, what properties are varied by the human voice to produce different words / syllables?

What does it mean that physics no longer uses mechanical models to describe phenomena?

How does the math work when buying airline miles?

Strange behavior of Object.defineProperty() in JavaScript

Has negative voting ever been officially implemented in elections, or seriously proposed, or even studied?

How to align multiple equations

Is it fair for a professor to grade us on the possession of past papers?

What would you call this weird metallic apparatus that allows you to lift people?

Is it possible to force a specific program to remain in memory after closing it?

How would a mousetrap for use in space work?

Should a wizard buy fine inks every time he want to copy spells into his spellbook?

Significance of Cersei's obsession with elephants?

What does Turing mean by this statement?

What to do with repeated rejections for phd position

How many morphisms from 1 to 1+1 can there be?

The Nth Gryphon Number

SSL cert for kubernetes Ingress for custom domain hosted by google domain

.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty height:90px;width:728px;box-sizing:border-box;

0

I have purchased a domain name from google domains.

I setup a project with GCLOUD Kubernetes using Ingress.

Documentation for ingress Ingress Github says to enter
key here:

apiVersion: v1
kind: Secret
metadata:
 name: testsecret
 namespace: default
type: Opaque
data:
 tls.crt: base64 encoded cert
 tls.key: base64 encoded key

I found doc for how to configure and get SSL cert for app engine. app engine custom domains.

I'm guessing that app engine SSL config has nothing to do with kubernetes ingress.

Would like to know how to get and maintain ssl cert for my ingress.

ssl-certificate kubernetes google-kubernetes-engine

share|improve this question

edited Mar 2 '18 at 9:11

N Singh

414210

asked Mar 1 '18 at 20:57

grabbaggrabbag

12826

• 
  
  
  

  
  1
  

  
  
  
  
  
  

  
  
  So all you want is a cert, not how to apply it?
  
  – Spooler
  Mar 1 '18 at 20:58
  

  
  
  
  

add a comment | 

0

I have purchased a domain name from google domains.

I setup a project with GCLOUD Kubernetes using Ingress.

Documentation for ingress Ingress Github says to enter
key here:

apiVersion: v1
kind: Secret
metadata:
 name: testsecret
 namespace: default
type: Opaque
data:
 tls.crt: base64 encoded cert
 tls.key: base64 encoded key

I found doc for how to configure and get SSL cert for app engine. app engine custom domains.

I'm guessing that app engine SSL config has nothing to do with kubernetes ingress.

Would like to know how to get and maintain ssl cert for my ingress.

ssl-certificate kubernetes google-kubernetes-engine

share|improve this question

edited Mar 2 '18 at 9:11

N Singh

414210

asked Mar 1 '18 at 20:57

grabbaggrabbag

12826

• 
  
  
  

  
  1
  

  
  
  
  
  
  

  
  
  So all you want is a cert, not how to apply it?
  
  – Spooler
  Mar 1 '18 at 20:58
  

  
  
  
  

add a comment | 

I have purchased a domain name from google domains.

I setup a project with GCLOUD Kubernetes using Ingress.

Documentation for ingress Ingress Github says to enter
key here:

apiVersion: v1
kind: Secret
metadata:
 name: testsecret
 namespace: default
type: Opaque
data:
 tls.crt: base64 encoded cert
 tls.key: base64 encoded key

I found doc for how to configure and get SSL cert for app engine. app engine custom domains.

I'm guessing that app engine SSL config has nothing to do with kubernetes ingress.

Would like to know how to get and maintain ssl cert for my ingress.

ssl-certificate kubernetes google-kubernetes-engine

share|improve this question

edited Mar 2 '18 at 9:11

N Singh

414210

asked Mar 1 '18 at 20:57

grabbaggrabbag

12826

apiVersion: v1
kind: Secret
metadata:
 name: testsecret
 namespace: default
type: Opaque
data:
 tls.crt: base64 encoded cert
 tls.key: base64 encoded key

share|improve this question

edited Mar 2 '18 at 9:11

N Singh

414210

asked Mar 1 '18 at 20:57

grabbaggrabbag

12826

share|improve this question

edited Mar 2 '18 at 9:11

N Singh

414210

asked Mar 1 '18 at 20:57

grabbaggrabbag

12826

edited Mar 2 '18 at 9:11

N Singh

414210

edited Mar 2 '18 at 9:11

N Singh

414210

asked Mar 1 '18 at 20:57

grabbaggrabbag

12826

asked Mar 1 '18 at 20:57

grabbaggrabbag

12826

1 Answer
1

active

oldest

votes

0

Ingress can be secured with the secret having TLS private key and the certificate. Then can provide reference to the secret in the ingress. Refer to this documentation for more information.

Here is the example for the TLS Ingress rule to use SSL in NGINX along with information on storing SSL certificate in a secret.

Example:

Create secret:

kubectl create secret tls foo-secret --key /tmp/tls.key --cert /tmp/tls.crt

Reference secret in the ingress:

 spec:
 tls:
 - hosts:
 foo.bar.com
 secretName: foo-secret

You may also wants to check these links/documentation, which can help you.

Link 1
Link 2
Link 3

share|improve this answer

answered Mar 1 '18 at 23:53

N SinghN Singh

414210

• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  Thank you. What about the cert themselves. Google app appears to offer auto update of certs, like wise so does "lets encrypt". Any what to automate the cert refresh when using ingress ?
  
  – grabbag
  Mar 2 '18 at 1:13
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  There is a feature request in place for automated certificate management. You can "star" this feature request to show your interest in this feature.
  
  – N Singh
  Mar 2 '18 at 1:42
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  I cant find documentation on the timestamp "last_updated" in your "Link 3". Does anyone know what this does?
  
  – grabbag
  Mar 2 '18 at 12:04
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  @grabbag I could not find any documentation on "last_updated" label as well. However, as per the comment describing the label 'last_update' in ingress.yaml file, it is 'Timestamp used in order to force reload of the secret'. It should work just using the 'kubectl apply -f ingress_file.yaml' as well.
  
  – N Singh
  Mar 6 '18 at 15:11
  

  
  
  
  

add a comment | 

Your Answer

StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "2"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);

StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);

else
createEditor();

);

function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);



);

draft saved

draft discarded

Sign up or log in

StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);

Sign up using Google

Sign up using Facebook

Sign up using Email and Password

Post as a guest

Name

Email

Required, but never shown

StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f899560%2fssl-cert-for-kubernetes-ingress-for-custom-domain-hosted-by-google-domain%23new-answer', 'question_page');

);

Post as a guest

Name

Email

Required, but never shown

0

Ingress can be secured with the secret having TLS private key and the certificate. Then can provide reference to the secret in the ingress. Refer to this documentation for more information.

Here is the example for the TLS Ingress rule to use SSL in NGINX along with information on storing SSL certificate in a secret.

Example:

Create secret:

kubectl create secret tls foo-secret --key /tmp/tls.key --cert /tmp/tls.crt

Reference secret in the ingress:

 spec:
 tls:
 - hosts:
 foo.bar.com
 secretName: foo-secret

You may also wants to check these links/documentation, which can help you.

Link 1
Link 2
Link 3

share|improve this answer

answered Mar 1 '18 at 23:53

N SinghN Singh

414210

• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  Thank you. What about the cert themselves. Google app appears to offer auto update of certs, like wise so does "lets encrypt". Any what to automate the cert refresh when using ingress ?
  
  – grabbag
  Mar 2 '18 at 1:13
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  There is a feature request in place for automated certificate management. You can "star" this feature request to show your interest in this feature.
  
  – N Singh
  Mar 2 '18 at 1:42
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  I cant find documentation on the timestamp "last_updated" in your "Link 3". Does anyone know what this does?
  
  – grabbag
  Mar 2 '18 at 12:04
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  @grabbag I could not find any documentation on "last_updated" label as well. However, as per the comment describing the label 'last_update' in ingress.yaml file, it is 'Timestamp used in order to force reload of the secret'. It should work just using the 'kubectl apply -f ingress_file.yaml' as well.
  
  – N Singh
  Mar 6 '18 at 15:11
  

  
  
  
  

add a comment | 

0

Ingress can be secured with the secret having TLS private key and the certificate. Then can provide reference to the secret in the ingress. Refer to this documentation for more information.

Here is the example for the TLS Ingress rule to use SSL in NGINX along with information on storing SSL certificate in a secret.

Example:

Create secret:

kubectl create secret tls foo-secret --key /tmp/tls.key --cert /tmp/tls.crt

Reference secret in the ingress:

 spec:
 tls:
 - hosts:
 foo.bar.com
 secretName: foo-secret

You may also wants to check these links/documentation, which can help you.

Link 1
Link 2
Link 3

share|improve this answer

answered Mar 1 '18 at 23:53

N SinghN Singh

414210

• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  Thank you. What about the cert themselves. Google app appears to offer auto update of certs, like wise so does "lets encrypt". Any what to automate the cert refresh when using ingress ?
  
  – grabbag
  Mar 2 '18 at 1:13
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  There is a feature request in place for automated certificate management. You can "star" this feature request to show your interest in this feature.
  
  – N Singh
  Mar 2 '18 at 1:42
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  I cant find documentation on the timestamp "last_updated" in your "Link 3". Does anyone know what this does?
  
  – grabbag
  Mar 2 '18 at 12:04
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  @grabbag I could not find any documentation on "last_updated" label as well. However, as per the comment describing the label 'last_update' in ingress.yaml file, it is 'Timestamp used in order to force reload of the secret'. It should work just using the 'kubectl apply -f ingress_file.yaml' as well.
  
  – N Singh
  Mar 6 '18 at 15:11
  

  
  
  
  

add a comment | 

Ingress can be secured with the secret having TLS private key and the certificate. Then can provide reference to the secret in the ingress. Refer to this documentation for more information.

Here is the example for the TLS Ingress rule to use SSL in NGINX along with information on storing SSL certificate in a secret.

Example:

Create secret:

kubectl create secret tls foo-secret --key /tmp/tls.key --cert /tmp/tls.crt

Reference secret in the ingress:

 spec:
 tls:
 - hosts:
 foo.bar.com
 secretName: foo-secret

You may also wants to check these links/documentation, which can help you.

Link 1
Link 2
Link 3

share|improve this answer

answered Mar 1 '18 at 23:53

N SinghN Singh

414210

kubectl create secret tls foo-secret --key /tmp/tls.key --cert /tmp/tls.crt

 spec:
 tls:
 - hosts:
 foo.bar.com
 secretName: foo-secret

share|improve this answer

answered Mar 1 '18 at 23:53

N SinghN Singh

414210

answered Mar 1 '18 at 23:53

N SinghN Singh

414210

answered Mar 1 '18 at 23:53

N SinghN Singh

414210