dns01 solver

manifests/blog-app/clusterIssuer.yaml

@@ -1,3 +1,20 @@
+# apiVersion: cert-manager.io/v1
+# kind: ClusterIssuer
+# metadata:
+#   name: letsencrypt-prod-cluster
+#   namespace: istio-system
+# spec:
+#   acme:
+#     email: [email protected]
+#     server: https://acme-v02.api.letsencrypt.org/directory
+#     privateKeySecretRef:
+#       name: letsencrypt-prod-cluster
+#     solvers:
+#     - http01:
+#         ingress:
+#           class: istio
+
+
 apiVersion: cert-manager.io/v1
 kind: ClusterIssuer
 metadata:
@@ -10,6 +27,5 @@ spec:
     privateKeySecretRef:
       name: letsencrypt-prod-cluster
     solvers:
-    - http01:
-        ingress:
-          class: istio
+    - dns01:
+        manual:

manifests/blog-app/istio-gateway-virtualService.yaml

@@ -17,6 +17,8 @@ spec:
     # hosts: ["myblog.com"]: Accepts traffic only for myblog.com
     hosts:
     - "*"
+    tls:
+      httpsRedirect: false # Handle redirect in the VirtualService
   - port:
       number: 443
       name: https