Custom certificate upload to gke

Hi

I have two certs for two services which was already deployed on cloud run for anthos using Kubernetes. I want to inject those certificate to these services.

I found this doc:

https://cloud.google.com/endpoints/docs/openapi/specify-esp-v2-startup-options#ssl_flags

I am adding as a secret (reference method → Mounted as volume, Mount path → /tm/ssl/endpoints) and then add .crt and .key in the path and keys value.

But I don’t know it is working or not.

I checked the logs and I saw these errors came up :

WARNING: got signal: SIGTERM
INFO: sending TERM to PID=7
INFO: sending TERM to PID=20
Server got signal terminated, stopping
[main]caught ENVOY_SIGTERM
[main]shutting down server instance
[main]main dispatch loop exited
CRITICAL: Config Manager is down, killing envoy process.
INFO: Killing process: pid=20
ERROR: The child process: pid=20 may not exist.

Some one please help me to understand.

I just want to inject my self signed certs to my services.

2 Likes