You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
In order to use mTLS service security with Traffic Director "Mesh certificates" must be enabled on the cluster. Add the ability for all cluster modules in this repository to enable this functionality with a variable.
Terraform Resources
The documentation for `google_container_cluster` with the `mesh_certificates` block
https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/container_cluster#enable_certificates
Instructions for `--enable-mesh-certificates` on GKE cluster in the Traffic Director documentation for setting up mTLS certificates
https://cloud.google.com/traffic-director/docs/security-envoy-setup#create-cluster
Detailed design
This could look like exposing an module variable to configure the underlying `google_container_cluster` terraform resource.
mesh_certificates {
enable_certificates = var.enable_mesh_certificates
}
### Additional information
_No response_
The text was updated successfully, but these errors were encountered:
TL;DR
In order to use mTLS service security with Traffic Director "Mesh certificates" must be enabled on the cluster. Add the ability for all cluster modules in this repository to enable this functionality with a variable.
Terraform Resources
Detailed design
The text was updated successfully, but these errors were encountered: