Domain
resourceless than a minute
Here’s an example of a fully configured Domain
resource:
apiVersion: sme.sap.com/v1alpha1
kind: Domain
metadata:
namespace: cap-app-01
name: cap-app-01-primary
spec:
domain: my.cluster.shoot.url.k8s.example.com
ingressSelector:
app: istio-ingressgateway
istio: ingressgateway
tlsMode: Simple # Simple (default) or Mutual
dnsMode: Wildcard # Wildcard or Subdomain or None (default)
dnsTarget: public-ingress.cluster.domain # Optional
dnsTarget
field is optional. If specified, it will be used; otherwise, it will be derived from the Istio Ingress Gateway via ingressSelector
.Gateway
and DNSEntry
will be created in the same namespace as the Domain
resource while the Certificates
will be created in the namespace where Istio Ingress Gateway is present.