istio
/
istio.io
mirror of https://github.com/istio/istio.io.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

egress tls origination - clarify required RBAC (#11804) 

Signed-off-by: Faseela K <faseela.k@est.tech>

Signed-off-by: Faseela K <faseela.k@est.tech>
This commit is contained in:
Faseela K 2022-09-06 16:22:31 +02:00 committed by GitHub
parent e057ecc45f
commit 13da430536
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
content/en/docs/tasks/traffic-management/egress/egress-tls-origination/index.md
View File

@ -238,7 +238,7 @@ Follow [these steps](/docs/tasks/traffic-management/egress/egress-gateway-tls-or
1. Create required `RBAC` to make sure the secret created in the above step is accessible to the client pod, which is `sleep` in this case.
{{< text bash >}}
$ kubectl create role client-credential-role --resource=secret --verb=get,list,watch
$ kubectl create role client-credential-role --resource=secret --verb=list
$ kubectl create rolebinding client-credential-role-binding --role=client-credential-role --serviceaccount=default:sleep
{{< /text >}}

2
content/en/docs/tasks/traffic-management/egress/egress-tls-origination/snips.sh
View File

@ -129,7 +129,7 @@ kubectl create secret generic client-credential --from-file=tls.key=client.examp
}
snip_configure_the_client_sleep_pod_2() {
kubectl create role client-credential-role --resource=secret --verb=get,list,watch
kubectl create role client-credential-role --resource=secret --verb=list
kubectl create rolebinding client-credential-role-binding --role=client-credential-role --serviceaccount=default:sleep
}