Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Multiple pre-shared certificates not working #419

Closed
Kronuz opened this issue Aug 2, 2018 · 6 comments
Closed

Multiple pre-shared certificates not working #419

Kronuz opened this issue Aug 2, 2018 · 6 comments
Assignees

Comments

@Kronuz
Copy link

Kronuz commented Aug 2, 2018

In the documentation (https://github.com/kubernetes/ingress-gce/blob/fea549960931d72f6bd9505796d75ea8a085f92b/README.md#gcp-ssl-cert) it says multiple pre-shared certs can be specified as follows:

  annotations:
      ingress.gcp.kubernetes.io/pre-shared-cert: "my-certificate-1, my-certificate-2, my-certificate-3"

However, when I try that, I get the following error and certificates are not loaded:

Warning  GCE      4s                  loadbalancer-controller  googleapi: Error 400: Invalid value 'my-certificate-1, my-certificate-2, my-certificate-3'. Values must match the following regular expression: '[a-z](?:[-a-z0-9]{0,61}[a-z0-9])?', invalidParameter

Version is:

$ kubectl version
Client Version: version.Info{Major:"1", Minor:"9", GitVersion:"v1.9.7", GitCommit:"dd5e1a2978fd0b97d9b78e1564398aeea7e7fe92", GitTreeState:"clean", BuildDate:"2018-04-19T00:05:56Z", GoVersion:"go1.9.3", Compiler:"gc", Platform:"darwin/amd64"}
Server Version: version.Info{Major:"1", Minor:"9+", GitVersion:"v1.9.7-gke.3", GitCommit:"9b5b719c5f295c99de68ffb5b63101b0e0175376", GitTreeState:"clean", BuildDate:"2018-05-31T18:32:23Z", GoVersion:"go1.9.3b4", Compiler:"gc", Platform:"linux/amd64"}
@rramkumar1
Copy link
Contributor

rramkumar1 commented Aug 3, 2018

What version of the ingress controller are you running? Based on your k8s version, I would think it is a version that does not support multiple TLS. Note that multiple TLS is supported in ingress-gce version 1.10 and higher

@rramkumar1
Copy link
Contributor

ping @Kronuz

@Kronuz
Copy link
Author

Kronuz commented Aug 14, 2018

Yes, I was using v1.9.7-gke.3, and neither annotations nor multiple tls.secretName worked. With v1.10 at least the later works; but to be honest, I didn’t try comma separated certificate names in annotations with it, only secretName.

@bowei bowei changed the title Multiple pre-shaed certificates not working Multiple pre-shared certificates not working Aug 14, 2018
@bowei
Copy link
Member

bowei commented Aug 14, 2018

Can this be closed?

@rramkumar1
Copy link
Contributor

@Kronuz going to close the issue out for now since it looks to be resolved.

Please reopen if you have further concerns.

@rramkumar1
Copy link
Contributor

/close

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

4 participants