TLS.md: Move the TLS secret misc bit to the TLS document

This commit is contained in:
Aarni Koskela 2018-05-02 17:11:20 +03:00
parent 52e730292e
commit 451a01bb0a
2 changed files with 18 additions and 6 deletions

View file

@ -1,11 +1,5 @@
# Miscellaneous
## Conventions
Anytime we reference a tls secret, we mean (x509, pem encoded, RSA 2048, etc). You can generate such a certificate with:
`openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout ${KEY_FILE} -out ${CERT_FILE} -subj "/CN=${HOST}/O=${HOST}"`
and create the secret via `kubectl create secret tls ${CERT_NAME} --key ${KEY_FILE} --cert ${CERT_FILE}`
## Requirements
The default backend is a service which handles all url paths and hosts the nginx controller doesn't understand (i.e., all the requests that are not mapped with an Ingress).