Run behind an ingress

In this guide we will list the necessary steps to achieve this using the Traefik-K8s operator and run Notary behind an ingress.

Pre-requisites

• notary-k8s deployed on a Juju model

1. Deploy Traefik

juju deploy traefik-k8s --channel edge --trust

2. Deploy Self Signed Certificates Operator

juju deploy self-signed-certificates --channel beta

3. Integrate Self-Signed-Certificates Operator

Note: For now this step is required so Notary and Traefik share the same CA certificate, this is going to be replace with the certificate-transfer-interface.

juju integrate self-signed-certificates:certificates traefik-k8s:certificates
juju integrate self-signed-certificates:certificates notary-k8s:certificates

4. Integrate Notary with Traefik

juju integrate notary-k8s:ingress traefik-k8s:ingress

5. Get the URL

Run the show-proxied-endpoints action on Traefik.

juju run traefik-k8s/0 show-proxied-endpoints

# Sample Action Output
Running operation 1 with 1 task
  - task 2 on unit-traefik-k8s-0

Waiting for task 2...
proxied-endpoints: '{"notary-k8s": {"url": "https://10.0.0.5/demo-notary-k8s"}}'

You should now be able to access Notary using the URL in the action output.