mirror of
https://github.com/openshift/openshift-docs.git
synced 2026-02-05 12:46:18 +01:00
39 lines
1.8 KiB
Plaintext
39 lines
1.8 KiB
Plaintext
:_mod-docs-content-type: ASSEMBLY
|
|
[id="cert-manager-operator-integrating-istio"]
|
|
= Integrating the {cert-manager-operator} with Istio-CSR
|
|
include::_attributes/common-attributes.adoc[]
|
|
:context: cert-manager-operator-integrating-istio
|
|
|
|
toc::[]
|
|
|
|
[role="_abstract"]
|
|
The {cert-manager-operator} provides enhanced support for securing workloads and control plane components in {SMProductName} or Istio. This includes support for certificates enabling mutual TLS (mTLS), which are signed, delivered, and renewed using cert-manager issuers. You can secure Istio workloads and control plane components by using the {cert-manager-operator} managed Istio-CSR agent.
|
|
|
|
With this Istio-CSR integration, Istio can now obtain certificates from the {cert-manager-operator}, simplifying security and certificate management.
|
|
|
|
[id="cert-manager-operator-istio-csr-installing_{context}"]
|
|
== Installing the Istio-CSR agent through {cert-manager-operator}
|
|
|
|
// Creating issuer
|
|
include::modules/cert-manager-istio-creating-issuer.adoc[leveloffset=+2]
|
|
|
|
[role="_additional-resources"]
|
|
.Additional resources
|
|
|
|
* xref:../../security/cert_manager_operator/index.adoc#cert-manager-issuer-types_cert-manager-operator-about[{cert-manager-operator} issuer providers]
|
|
|
|
// Installing using Istio-CSR
|
|
include::modules/cert-manager-istio-csr-installing.adoc[leveloffset=+2]
|
|
|
|
// Setting a log level for istio-csr
|
|
include::modules/cert-manager-istio-csr-setting-log-level.adoc[leveloffset=+2]
|
|
|
|
// Configuring the namespace selector for CA bundle distribution
|
|
include::modules/cert-manager-istio-csr-config-namespace-sel.adoc[leveloffset=+2]
|
|
|
|
// Configuring the CA certificate of the istio server
|
|
include::modules/cert-manager-istio-csr-config-ca-cert.adoc[leveloffset=+2]
|
|
|
|
// Uninstalling cert-manager Operator with Istio-CSR
|
|
include::modules/cert-manager-istio-csr-uninstalling.adoc[leveloffset=+1]
|