diff kube/10-pomerium.yaml @ 1:9d3a9e524ad3

fuss with ns and stuff to get it working. forward all (over http) to nginx at first
author drewp@bigasterisk.com
date Tue, 13 Sep 2022 22:32:50 -0700
parents 6bf643829330
children b605b92e89b8
line wrap: on
line diff
--- a/kube/10-pomerium.yaml	Sun Sep 11 01:24:55 2022 -0700
+++ b/kube/10-pomerium.yaml	Tue Sep 13 22:32:50 2022 -0700
@@ -12,5 +12,6 @@
     refreshDirectory:
       interval: "10h"
       timeout: "10s"
-  certificates:
-    - pomerium/pomerium-proxy-tls
+  # Note pom won't start up if this cert doesn't exist, so you have to run once
+  # with it commented out, then after cert success, run again with it enabled.
+  certificates: [pomerium/pomerium-proxy-tls]