If you update the secret with the new cert, the GCP ingress controller should pick that up and update the certificate on GCP. I use this to automate certificate renewal using cert-manager <https://github.com/jetstack/cert-manager>.
On Thu, Feb 15, 2018 at 2:06 AM <mderos...@gmail.com> wrote: > Hi, > I have to update my ssl certificate for my (ingress) https load balancer. > When I created the cluster I executed these commands: > > > kubectl create secret tls mysecret --key mykey.key --cert mycert.crt > > kubectl apply -f ./ingress.yaml > > apiVersion: extensions/v1beta1 > kind: Ingress > metadata: > name: ingress > annotations: > ingress.kubernetes.io/rewrite-target: / > ingress.kubernetes.io/ssl-redirect: "false" > spec: > tls: > - secretName: mysecret > backend: > serviceName: nginx-nodeport-service > servicePort: 80 > > > > and everything worked properly. > But now I have to update my certificate. > I'm reading on GCE documentation that I could execute these commands: > > gcloud compute ssl-certificates create <certificate_name> --certificate > <path_file.crt> --private-key <path_file.key> > > > gcloud compute target-https-proxies list > > > gcloud compute target-https-proxies update <https_proxy> > --ssl-certificates <certificate_name> > > > But this procedure sometimes works and sometimes not (when not the https > certificate is the old one) > > Any suggestions? > > -- > You received this message because you are subscribed to the Google Groups > "Kubernetes user discussion and Q&A" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to kubernetes-users+unsubscr...@googlegroups.com. > To post to this group, send email to kubernetes-users@googlegroups.com. > Visit this group at https://groups.google.com/group/kubernetes-users. > For more options, visit https://groups.google.com/d/optout. > -- You received this message because you are subscribed to the Google Groups "Kubernetes user discussion and Q&A" group. To unsubscribe from this group and stop receiving emails from it, send an email to kubernetes-users+unsubscr...@googlegroups.com. To post to this group, send email to kubernetes-users@googlegroups.com. Visit this group at https://groups.google.com/group/kubernetes-users. For more options, visit https://groups.google.com/d/optout.
