Updates and extends client cert documentation (#2105)

Updates and extends the documentation about enabling client certificate authentication.
This commit is contained in:
Bea 2018-02-16 16:17:29 +01:00 committed by Manuel Alejandro de Brito Fontes
parent 769f11df60
commit f468007d6c
5 changed files with 45 additions and 28 deletions

View file

@ -0,0 +1,11 @@
# Client Certificate Authentication
It is possible to enable Client Certificate Authentication using additional annotations in the Ingress.
## Setup instructions
1. Create a file named `ca.crt` containing the trusted certificate authority chain (all ca certificates in PEM format) to verify client certificates.
2. Create a secret from this file:
`kubectl create secret generic auth-tls-chain --from-file=ca.crt --namespace=default`
3. Add the annotations as provided in the [ingress.yaml](ingress.yaml) example to your ingress object.