Hi all,
I tried to use below parameters in docker run for data plane but so far tls / ssl in service level not applied (does not matter what certificates, it still allow request to go through):
KONG_NGINX_HTTP_PROXY_SSL_VERIFY=on
KONG_NGINX_HTTP_PROXY_SSL_TRUSTED_CERTIFICATE=/home/admin/kong/lb_eks.crt
How to apply ssl in the docker run for data planes?
The complete docker run command is below:
sudo docker run -d --name kong_data_plane --hostname Kong-DP1
–network=kong-net
-v “/home/admin/kong_cert:/home/admin/kong”
-e “KONG_ROLE=data_plane”
-e “KONG_DATABASE=off”
-e “KONG_PROXY_LISTEN: 0.0.0.0:8000, 0.0.0.0:8443 ssl”
-e “KONG_STATUS_LISTEN: 0.0.0.0:8100”
-e “KONG_CLUSTER_CONTROL_PLANE=10.1.0.11:8005”
-e “KONG_CLUSTER_TELEMETRY_ENDPOINT=10.1.0.11:8006”
-e “KONG_CLUSTER_CERT=/home/admin/kong/cluster.crt”
-e “KONG_CLUSTER_CERT_KEY=/home/admin/kong/cluster.key”
-e “KONG_SSL=on”
-e “KONG_SSL_CERT=/home/admin/kong/kong.lan.pem”
-e “KONG_SSL_CERT_KEY=/home/admin/kong/kong.lan.key”
-e “KONG_NGINX_HTTP_PROXY_SSL_VERIFY=on”
-e “KONG_NGINX_HTTP_PROXY_SSL_TRUSTED_CERTIFICATE=/home/admin/kong/lb_eks.crt”
-e “KONG_VITALS=on”
-p 8000:8000
-p 8100:8100
-p 8443:8443
kong/kong-gateway:3.0.0.0-alpine