configurable ssl_verify_client

2017-10-05 13:26:07 +02:00 · 2017-10-05 13:26:07 +02:00 · b8f7ea05c4
commit b8f7ea05c4
parent 23916be991
5 changed files with 27 additions and 1 deletions
--- a/examples/auth/client-certs/nginx/nginx-tls-auth.yaml
+++ b/examples/auth/client-certs/nginx/nginx-tls-auth.yaml
@ -5,6 +5,7 @@ metadata:
    # Create this with kubectl create secret generic caingress --from-file=ca.crt --namespace=default
    ingress.kubernetes.io/auth-tls-secret: "default/caingress"
    ingress.kubernetes.io/auth-tls-verify-depth: "3"
+    ingress.kubernetes.io/auth-tls-verify-client: "on"
    auth-tls-error-page: "http://www.mysite.com/error-cert.html"
    kubernetes.io/ingress.class: "nginx"
  name: nginx-test