Add some extra detail to the client cert auth example regarding potential gotcha #3212
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
What this PR does / why we need it: I'm directly aware of at least two cases (one of them being myself!) where somebody was caught out by the fact that the trusted client cert issuers for an ingress resource must be given in a file named
ca.crt
and that other filenames will fail to work entirely. Given that it's happened at least twice, I'm assuming it's something that could catch more people out and is worth mentioning in the client certificate example documentation.This change makes it clear to those reading the documentation that this is a potential gotcha. Also, while I was at it, I improved some of the language in the example to be slightly clearer.
Which issue this PR fixes: N/a, documentation improvement only.
Special notes for your reviewer: N/a as far as I can tell. I just signed the CLA - I hope I did it correctly!