๋กœ์ผ“๐Ÿพ
article thumbnail
[Cert manager] Let's Encrypt ๋ฅผ ์ด์šฉํ•ด์„œ Istio Gateway ์— TLS ์„ ์ ์šฉํ•ด๋ณด์ž! - Route53
DevOps/Cert Manager 2023. 9. 13. 23:52

์ง€๋‚œ ๊ธ€์—์„œ Cloudflare ์—์„œ ์ƒ์„ฑํ•œ ๋„๋ฉ”์ธ๊ณผ Let's Encrypt ๋ฅผ ์ด์šฉํ•ด์„œ TLS ๋ฅผ httpbin ์— ์ ์šฉํ–ˆ์—ˆ์Šต๋‹ˆ๋‹ค. ์ด๋ฒˆ์—๋Š” Cloudflare ๋ณด๋‹ค ๋” ๋Œ€์ค‘์ ์ธ Route53 ์—์„œ ์ƒ์„ฑํ•œ ๋„๋ฉ”์ธ์—๋„ TLS ๋ฅผ ์ ์šฉํ•ด๋ณด๊ณ ์ž ํ•ฉ๋‹ˆ๋‹ค. Route53 ์—์„œ ๊ตฌ๋งคํ•œ ๋„๋ฉ”์ธ์— ๋Œ€ํ•ด์„œ๋Š” AWS ACM ์„ ์ด์šฉํ•ด์„œ ๋ฌด๋ฃŒ๋กœ TLS ๋ฅผ ๋ฐœ๊ธ‰๋ฐ›์„ ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค. ๊ทธ๋ฆฌ๊ณ  ๋ฐœ๊ธ‰๋ฐ›์€ TLS ๋ฅผ AWS ALB ์— ๋ฐ”๋กœ ์ ์šฉํ•˜๊ฒŒ ๋˜๋ฉด ์•„์ฃผ ์‰ฝ๊ฒŒ TLS ํ†ต์‹ ์ด ๊ฐ€๋Šฅํ•ฉ๋‹ˆ๋‹ค. ๊ทธ๋ž˜์„œ ALB ์™€ Istio ๋ฅผ ์ด์šฉํ•˜๊ฒŒ ๋˜๋ฉด ๋Œ€๋žต ์•„๋ž˜ ๊ทธ๋ฆผ๊ณผ ๊ฐ™์ฃ . ํ•˜์ง€๋งŒ ์™ธ๋ถ€๋งŒ TLS ๋ฅผ ํ†ต์‹ ์ด ๊ฐ€๋Šฅํ•˜๋ฏ€๋กœ ๋‚ด๋ถ€์—์„  TLS ํ†ต์‹ ์ด ๋ถˆ๊ฐ€๋Šฅํ•ฉ๋‹ˆ๋‹ค. ACM ์„ ํ†ตํ•ด ๋„๋ฉ”์ธ์— ๋Œ€ํ•œ Cert ๋ฅผ ๋ฐœ๊ธ‰๋ฐ›์„ ์ˆ˜ ์žˆ๋Š”๋ฐ, ์ด ๊ฐ’์€ ๋‹ค์šด๋ฐ›์•„์„œ ์‚ฌ์šฉ๋ถˆ๊ฐ€๋Šฅ..

profile on loading

Loading...