Skip to content

Commit

Permalink
Explicitly point out not installing ns-cert component for http01 chal…
Browse files Browse the repository at this point in the history
…lenge (#2890)

* explicitly point out not installing ns-cert component for http01 challenge

* fix format

* address comments
  • Loading branch information
Zhimin Xiang authored Oct 12, 2020
1 parent ccb8363 commit 0f436f9
Showing 1 changed file with 5 additions and 1 deletion.
6 changes: 5 additions & 1 deletion docs/serving/using-auto-tls.md
Original file line number Diff line number Diff line change
Expand Up @@ -31,7 +31,8 @@ Knative supports the following Auto TLS modes:

- In this type, your cluster does not need to be able to talk to your DNS server. You just
need to map your domain to the IP of the cluser ingress.
- When using HTTP-01 challenge, **a certificate will be provisioned per Knative Service.** Certificate provision per namespace is not supported when using HTTP-01 challenge.
- When using HTTP-01 challenge, **a certificate will be provisioned per Knative Service.**
- **HTTP-01 does not support provisioning a certificate per namespace.**

## Before you begin

Expand Down Expand Up @@ -154,6 +155,9 @@ and which DNS provider validates those requests.

If you choose to use the mode of provisioning certificate per namespace, you need to install `networking-ns-cert` components.

**IMPORTANT:** Provisioning a certificate per namespace only works with DNS-01
challenge. This component cannot be used with HTTP-01 challenge.

1. Determine if `networking-ns-cert` deployment is already installed by
running the following command:

Expand Down

0 comments on commit 0f436f9

Please sign in to comment.