12 Commits (b0b0accdfc84e154b3d48ec334cd5b4f9b345667)

Author	SHA1	Message	Date
Joshua Bussdieker	51c99b1252	Fix missing link ... Signed-off-by: Joshua Bussdieker <jbussdieker@gmail.com>	6 years ago
Joshua Bussdieker	aff106f97f	Update to reflect location of docs ... Signed-off-by: Joshua Bussdieker <jbussdieker@gmail.com>	6 years ago
Joshua Bussdieker	2ed42013c4	Add docs for configuring SSL using Terraform. ... Signed-off-by: Joshua Bussdieker <jbussdieker@gmail.com>	6 years ago
Nguyen Hai Truong	2ca5d2ab9c	trivial fix typo ... Signed-off-by: Nguyen Hai Truong <truongnh@vn.fujitsu.com>	6 years ago
fibonacci1729	bd0686731c	fix(helm): fix(helm): add `--tls-hostname` flag to tls flags ... docs(*): update tiller_ssl.md to reflect IP SAN usage. When using helm/tiller in tls-verify mode, 127.0.0.1 should be listed as an IP SAN in the tiller certificate to pass hostname verficiation of the TLS handshake. Closes #4149	6 years ago
Brian	aedd306e83	Revert "fix(helm): add `--tls-hostname` flag to tls flags."	6 years ago
fibonacci1729	aaf1c6a352	docs(*): update tiller_ssl docs to reflect IP SAN usage. ... When using helm/tiller in tls-verify mode, 127.0.0.1 should be listed as an IP SAN in the tiller certificate to pass hostname verficiation of the TLS handshake. Closes #4149	6 years ago
mf-lit	215abe9fd4	Update tiller_ssl.md ... Add -days parameter to openssl signing commands for clarity. Also add some related troubleshooting steps.	7 years ago
AdamDang	31c03a2484	Update tiller_ssl.md ... "that" is duplicated.	7 years ago
lihuang	bf8bc42cfc	Update tiller_ssl.md	7 years ago
Matthew Fisher	35616bd0df	fix links to service_accounts.md	7 years ago
Matt Butcher	e8e6ac5d77	Fix/missing ssl params (#3152) ... * fix(helm): add TLS params back During a recent refactor, several TLS flags stopped being processed for a few of the commands. This fixes those commands, and documents how to set up TLS. * fix(tiller): add stricter certificate verification The older version of Tiller allowed a weaker set of certificate checks than we intended. This version requires a client certificate, and then requires that that certificate be signed by a known CA. This works around the situation where a user could provide a self-signed certificate.	7 years ago