GCP Identity Aware Proxy interoperability.

jetstack / kube-lego

DEPRECATED: Automatically request certificates for Kubernetes Ingress resources from Let's Encrypt

Apache License 2.0

2.16k stars 267 forks source link

GCP Identity Aware Proxy interoperability. #281

Open tmc opened 6 years ago

tmc commented 6 years ago

AFAICT the acme-challenge urls will be blocked if you enable IAP on ingress this software creates a cert for.

Is there any way to make these two play nicely together?

ajcrowe commented 6 years ago

I don't believe this is an issue, Lego creates a backend service which it appends to the ingress resource. This means unless you enable IAP on this addition backend you should be fine.