Skip to content

Latest commit

 

History

History
72 lines (48 loc) · 1.72 KB

tls.md

File metadata and controls

72 lines (48 loc) · 1.72 KB
Raw

TLS

A Kuadrant TLSPolicy custom resource:

  1. Targets Gateway API networking resources Gateways to provide tls for gateway listeners by managing the lifecycle of tls certificates using CertManager.

How it works

The TLSPolicy custom resource

Overview

The TLSPolicy spec includes the following parts:

  • A reference to an existing Gateway API resource (spec.targetRef)

High-level example and field definition

apiVersion: kuadrant.io/v1alpha1
kind: TLSPolicy
metadata:
  name: my-tls-policy
spec:
  # reference to an existing networking resource to attach the policy to
  # it can only be a Gateway API Gateway resource
  # it can only refer to objects in the same namespace as the TLSPolicy
  targetRef:
    group: gateway.networking.k8s.io
    kind: Gateway
    name: mygateway

Check out the API reference for a full specification of the TLSPolicy CRD.

Using the TLSPolicy

Targeting a Gateway networking resource

When a TLSPolicy targets a Gateway, the policy will be enforced on all gateway listeners that have a valid TLS section.

Target a Gateway by setting the spec.targetRef field of the TLSPolicy as follows:

apiVersion: kuadrant.io/v1beta2
kind: TLSPolicy
metadata:
  name: <TLSPolicy name>
spec:
  targetRef:
    group: gateway.networking.k8s.io
    kind: Gateway
    name: <Gateway Name>

Examples

Check out the following user guides for examples of using the Kuadrant TLSPolicy:

Known limitations