Skip to content

Commit

Permalink
add tls config setting related information to troubleshoot doc
Browse files Browse the repository at this point in the history
Signed-off-by: Alex Wu <[email protected]>
  • Loading branch information
popojk committed Nov 3, 2024
1 parent f745030 commit 74fa698
Showing 1 changed file with 27 additions and 0 deletions.
27 changes: 27 additions & 0 deletions docs/community/troubleshoot.rst
Original file line number Diff line number Diff line change
Expand Up @@ -176,3 +176,30 @@ Please add ``spark`` to the list of `enabled-plugins` in the config yaml file. F
default-for-task-types:
- container: container
- container_array: K8S-ARRAY
``authentication handshake failed: x509: "Kubernetes Ingress Controller Fake Certificate" certificate is not trusted"`` when deploying flyte-core to your own kubernetes cluster
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Please enable ``tls`` in the ingress configuration of your Kubernetes cluster:
.. code-block:: yaml
ingress:
host: <http://example.com|example.com>
separateGrpcIngress: true
separateGrpcIngressAnnotations:
<http://ingress.kubernetes.io/backend-protocol|ingress.kubernetes.io/backend-protocol>: "grpc"
annotations:
<http://ingress.kubernetes.io/app-root|ingress.kubernetes.io/app-root>: "/console"
<http://ingress.kubernetes.io/default-backend-redirect|ingress.kubernetes.io/default-backend-redirect>: "/console"
<http://kubernetes.io/ingress.class|kubernetes.io/ingress.class>: haproxy
tls:
enabled: true
Moreover, disable ``insecure`` in your ``flytectl`` client config.yaml:
.. code-block:: yaml
admin:
endpoint: dns:///example.com
authType: Pkce
insecure: false
insecureSkipVerify: true

0 comments on commit 74fa698

Please sign in to comment.