linkerd / linkerd/website

Combine both Automated Rotation of TLS Credentials documents for control-plane and webhooks

Open
#2,070 0 comments 1 reaction 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
JavaScript
Stars
60
Forks
221
Avg merge
4h 32m
Merged PRs (30d)
1

Description

Currently there are some differences in the two documents that make it hard to achieve both.

[Automatically rotating control plane TLS credentials](https://linkerd.io/2-edge/tasks/automatically-rotating-control-plane-tls-credentials/)

- In this document works fine

[Automatically rotating webhook TLS credentials](https://linkerd.io/2-edge/tasks/automatically-rotating-webhook-tls-credentials/)

- This document assumes you have NOT setup rotating control plane TLS credentials yet and it can make it confusing to understand.
- Also there is no mention of using cert manager to make the issuer or the alternative clusterIssuer like in the rotating control plane TLS credentials document.

[See my comment here explaining how to use cert manager to issue webhook certs](https://github.com/linkerd/linkerd2/discussions/8575#discussioncomment-14972528)

I could be doing something dumb with my solution and would appriciate any advice!

Maybe also add details on how the expiration and rotation steps flow.

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by comparing the linked control-plane and webhook TLS credential documents, then review the referenced discussion comment about using cert-manager. Consolidate the overlapping guidance so the combined document covers issuer and ClusterIssuer options, works when control-plane rotation is already configured, and explains the expiration and rotation flow.

Written by the indexing model from the issue text.

Assessment

Domain
documentation
Issue type
Documentation
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.