Trusted Certificate Authority
Authservice can be configured with additional trusted certificate bundle in cases where UDS Core ingress gateways are deployed with private PKI.
To configure, set UDS_CA_BUNDLE_CERTS as an environment variable with a Base64 encoded PEM formatted CA bundle that can be used to verify the certificates of the tenant gateway. For details on configuring this variable, see the Central Trust Bundle Management documentation.
Alternatively you can specify the CA_BUNDLE_CERTS variable in your uds-config.yaml:
variables: core: CA_BUNDLE_CERTS: <base64 encoded certificate authority>See configuring Istio Ingress for the relevant documentation on configuring ingress certificates.