Updates and extends client cert documentation (#2105)
Updates and extends the documentation about enabling client certificate authentication.
This commit is contained in:
parent
769f11df60
commit
f468007d6c
5 changed files with 45 additions and 28 deletions
|
|
@ -0,0 +1,11 @@
|
|||
# Client Certificate Authentication
|
||||
|
||||
It is possible to enable Client Certificate Authentication using additional annotations in the Ingress.
|
||||
|
||||
## Setup instructions
|
||||
1. Create a file named `ca.crt` containing the trusted certificate authority chain (all ca certificates in PEM format) to verify client certificates.
|
||||
|
||||
2. Create a secret from this file:
|
||||
`kubectl create secret generic auth-tls-chain --from-file=ca.crt --namespace=default`
|
||||
|
||||
3. Add the annotations as provided in the [ingress.yaml](ingress.yaml) example to your ingress object.
|
||||
Loading…
Add table
Add a link
Reference in a new issue