1

I am working on deploying an API solution on GCP where mutual SSL/TLS is required (server and client side certificates). So for the ingress of the traffic (entry point) I found that kubernetes ingress controller has this possibility (NGINX based). I am interested by cloud endpoints which has ESP (extensible service proxy which is also nginx deployment under kubernetes).

I couldn't find anywhere in the documentation whether mutual SSL/TLS is available for ESP (cloud endpoint), does anyone know the answer for this ?

dh88
  • 11
  • 1
  • 2

2 Answers2

0

This might be possible using Istio. Have you come across following article? which seems to suggest how to achieve MTLS for Endpoints.

https://istio.io/docs/examples/platform/endpoints/

Parth Mehta
  • 1,869
  • 5
  • 15
0

ESP supports mTLS. You can specify the certificates files here

      proxy_ssl_certificate /etc/nginx/ssl/backend.crt;
      proxy_ssl_certificate_key /etc/nginx/ssl/backend.key;

Here is its nginx config

Wayne Zhang
  • 147
  • 4