Skip to content

Create certificate for gitlab.net domains using cloudflare-issuer

Marcel Chacon requested to merge mchacon-cloudflare-ssl-san into main

What

Configure an additional host in istio-gateway to handle traffic for *.gitlab.net domain while terminating SSL with a different certificate generated by cert-manager using the cloudflare-issuer.

Why

The gitlab-combined issuer doesn't have access to add verification records in Cloudflare. We need to use the cloudflare-issuer instead.

Related Issue: https://gitlab.com/gitlab-com/gl-infra/reliability/-/issues/24726

Istio Docs Reference

Edited by Marcel Chacon

Merge request reports