This page describes what all you need to do if you are using Nginx Ingress Controller as a front-end for Webapp Gateway.
...
Run the following Kubectl command to copy the certificate to the PVC or shared storage volume for the Webapp Gateway pod.
Code Block language css theme Midnight Kubectl --namespace <namepace_name> cp <local_path_for_SSL_certificate> <pod_name>:shared/truststore/<SSL_certificate_name>
Navigate to the Microservice pod (Eg. Webrunner) by running the following command.
Code Block language css theme Midnight Kubectl --namespace <namespace_name> exec -it <pod_name> -- sh
Run the following Keytool command to import the certificate.
Code Block language css theme Midnight keytool -import -trustcacerts -file <Path_of_SSL_Certificate> -alias <alias_name> -keystore <Path of cacerts file>
Where,
<Path_of_SSL_Certificate> is the path of SSL certificate.
<Path of cacerts file> is the path of Truststore.
For example,
Code Block language css theme Midnight keytool -import -trustcacerts -file shared/truststore/ssl-certs.cer -alias adeptia -keystore shared/truststore/cacerts
You'll be prompted to enter a password. Enter the default password changeit.
- Run the exit command to exit from the pod shell.
- Restart all the Microservices to bring the changes into effect.
...
Open the ConfigMap of Nginx Ingress Controller in edit mode using the following command.
Code Block language css theme Midnight Kubectl edit configmap <name of the Nginx Ingress Controller ConfigMap> -n <namespace in which Nginx Ingress Controller is deployed>
- Add the property, enable-underscores-in-headers, with its value as true, in the data section of the ConfigMap as shown in the example below.
- Save the ConfigMap, and restart the Nginx Ingress Controller deployment.
Handling large sized SAML response
Run the following command to open the ingress resource in edit mode.
Code Block language css theme Midnight kubectl edit ingress <name of the ingress resource> -n <namespace where the ingress is deployed>- In the ingress resource, add the annotation nginx.ingress.kubernetes.io/proxy-buffer-size and provide a required value for it as highlighted in the image below.
...