3 ms·
For GKE, in beta, you can tell the ingress to get a TLS certificate automatically. Google will manage the whole process. The weird thing is, it uses letsencrypt
by briffle 7y ago
For GKE, in beta, you can tell the ingress to get a TLS certificate automatically. Google will manage the whole process. The weird thing is, it uses letsencrypt. Since Google has their own Root CA, that seemed like an interesting choice.
[0] https://cloud.google.com/kubernetes-engine/docs/how-to/managed-certs https://cloud.google.com/kubernetes-engine/docs/how-to/manag...
- dannyw 7y agoMaybe they don’t have a publicly available issuance (challenge/response, ACME, etc) infrastructure for their Root CA. Or maybe they just want to keep google CA, limited to Google properties. The same way you put things in googleusercontent.com and not google.com.