Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Docs] Add Traefik wildcard docs #876

Merged
merged 4 commits into from
Oct 20, 2021
Merged

[Docs] Add Traefik wildcard docs #876

Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
d0a18e4
Add Traefik wildcard docs
viniciusdc Oct 20, 2021
d386e88
Add double wildcard cert exception
viniciusdc Oct 20, 2021
743c93c
Add doc suggestions
viniciusdc Oct 20, 2021
63e8352
Add doc suggestions
viniciusdc Oct 20, 2021
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
9 changes: 9 additions & 0 deletions docs/source/installation/configuration.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -120,6 +120,15 @@ kubectl create secret tls <secret-name> \
--cert=path/to/cert/file --key=path/to/key/file
```

### Wildcard certificates

Some of QHub services might require special subdomains under your certificate, Wildcard certificates allow you to secure all subdomains of a domain with a single certificate. Defining a wildcard certificate decreases the amount of CN names you would need to define under the certificate configuration and reduces the chance of generating a wrong subdomain.

**Note**
It's not possible to request a double wildcard certificate for a domain (for example *.*.local.com). As a default behaviour of [Traefik](https://doc.traefik.io/traefik/https/tls/#default-certificate), if the Domain Name System (DNS) and Common Name (CN) name doesn't match, Traefik generates and uses a self-signed certificate. This may lead to some unexpected [TLS](https://www.internetsociety.org/deploy360/tls/basics) issues, so as an alternative of including each specific domain under the certificate CN list, you may also define a wildcard certificate.



## Security

This section is for configuring security relating to the QHub
Expand Down