From 59e10c24951277d0051bb6bd3fac3ca847605899 Mon Sep 17 00:00:00 2001 From: Gregory Hanson Date: Thu, 26 Jul 2018 10:45:22 -0500 Subject: [PATCH] bug with new certs getting picked up (#1987) --- .../tasks/traffic-management/secure-ingress/index.md | 12 ++++++++++++ 1 file changed, 12 insertions(+) diff --git a/content/docs/tasks/traffic-management/secure-ingress/index.md b/content/docs/tasks/traffic-management/secure-ingress/index.md index 37d1a763a9..0887e0611a 100644 --- a/content/docs/tasks/traffic-management/secure-ingress/index.md +++ b/content/docs/tasks/traffic-management/secure-ingress/index.md @@ -290,6 +290,12 @@ they have valid values, according to the output of the following commands: $ kubectl logs -n istio-system -l istio=ingressgateway {{< /text >}} +1. If the secret was created but the keys were not mounted, kill the ingress gateway pod and force it to reload certs: + + {{< text bash >}} + $ kubectl delete pod -n istio-system -l istio=ingressgateway + {{< /text >}} + 1. For macOS users, verify that you use _curl_ compiled with the [LibreSSL](http://www.libressl.org) library, as described in the [Before you begin](#before-you-begin) section. @@ -312,6 +318,12 @@ In addition to the steps in the previous section, perform the following: Subject: C=US, ST=Denial, L=Springfield, O=Dis, CN=httpbin.example.com {{< /text >}} +1. If the secret was created but the keys were not mounted, kill the ingress gateway pod and force it to reload certs: + + {{< text bash >}} + $ kubectl delete pod -n istio-system -l istio=ingressgateway + {{< /text >}} + ## Cleanup 1. Delete the `Gateway` configuration, the `VirtualService`, and the secrets: