Documentation Index
Fetch the complete documentation index at: /llms.txt
Use this file to discover all available pages before exploring further.
Set up Istio custom CA certificates by creating the CA certificates Kubernetes secret from X.509 PEM root, key, intermediate, and chain files.
| Filename | Description |
|---|---|
root-cert.pem | Root CA certificate for PKI. |
ca-cert.pem | Intermediate CA certificate from root CA. This is the Istio CA certificate. |
ca-key.pem | Private key for Istio CA certificate. |
cert-chain.pem | Full chain from ca-cert.pem to root-cert.pem (including both certificates). |
# Concatenate all certificates into a certificate chain file
# Assuming `N` intermediate certificates denoted as `int-ca-<i>.pem`, with `i = {1,...,N}`
cat ca-cert.pem int-ca-1.pem ... int-ca-N.pem root-cert.pem > cert-chain.pem
# Create new kubernetes secret with CA certificate files
kubectl -n istio-system create secret generic cacerts
--from-file=./ca-cert.pem
--from-file=./ca-key.pem
--from-file=./root-cert.pem
--from-file=./cert-chain.pem
fleetcommand-agent (Domino installer) automatically picks up the secret that you created and Istio uses the configured certificates.
In an existing Domino installation, you must restart all the pods.
Was this page helpful?