Skip to content

Commit

Permalink
move ingress tls doc
Browse files Browse the repository at this point in the history
  • Loading branch information
ale8k committed Oct 16, 2024
1 parent 6a8d5ab commit 04b7196
Show file tree
Hide file tree
Showing 3 changed files with 16 additions and 12 deletions.
3 changes: 2 additions & 1 deletion how-to/index.rst
Original file line number Diff line number Diff line change
Expand Up @@ -38,4 +38,5 @@ Security
.. toctree::
:maxdepth: 1

Harden JIMM deployment <security_hardening>
Harden JIMM deployment <security_hardening>
Setup Ingress with TLS <setup_ingress_with_tls>
12 changes: 1 addition & 11 deletions how-to/security_hardening.rst
Original file line number Diff line number Diff line change
Expand Up @@ -20,17 +20,7 @@ To set CORS on JIMM, use the configuration option ``cors-allowed-origins``.

Ingress TLS
-----------
The NGINX Ingress Integrator is a a charm responsible for creating Kubernetes ingress rules,
these rules can be hardened via TLS and the charm provides a means to do so. See `here <https://charmhub.io/nginx-ingress-integrator>`__.

Our LEGO charms provide certificates for charms from a desired ACME server and can be integrated
with the integrator to enable TLS at the ingress level. See `here <https://charmhub.io/httprequest-lego-k8s>`__.

You will require a domain that your ACME is aware of and an NGINX ingress controller installed
on your Kubernetes cluster.

With JAAS deployed, you can deploy both LEGO and the integrator, and integrate your LEGO charm deployment
to your ingress integrator, and then the ingress integrator to JIMM to enable TLS ingress for your deployment.
Please refer :doc:`here <../how-to/setup_ingress_with_tls>`.

Identity Provider
-----------------
Expand Down
13 changes: 13 additions & 0 deletions how-to/setup_ingress_with_tls.rst
Original file line number Diff line number Diff line change
@@ -0,0 +1,13 @@
JAAS: Setup Ingress with TLS
============================
The NGINX Ingress Integrator is a a charm responsible for creating Kubernetes ingress rules,
these rules can be hardened via TLS and the charm provides a means to do so. See `here <https://charmhub.io/nginx-ingress-integrator>`__.

Our LEGO charms provide certificates for charms from a desired ACME server and can be integrated
with the integrator to enable TLS at the ingress level. See `here <https://charmhub.io/httprequest-lego-k8s>`__.

You will require a domain that your ACME is aware of and an NGINX ingress controller installed
on your Kubernetes cluster.

With JAAS deployed, you can deploy both LEGO and the integrator, and integrate your LEGO charm deployment
to your ingress integrator, and then the ingress integrator to JIMM to enable TLS ingress for your deployment.

0 comments on commit 04b7196

Please sign in to comment.