update split deployments with TLS secured gRPC

[youngnick]

• Add make gencerts and make applycerts to Makefile
• Update ds-hostnet-split to expect the new certs.
• Add documentation for gRPC with TLS including example.
• Change split deployments to use the 'contour' name instead of the service env vars. Fixes deployment: Envoy use Contour dns name for gRPC connection #1127

Fixes #862
Updates #881

[stevesloka]

Should the secret type use kubernetes.io/tls instead of generic? This way we could have the cert/key's be consistent inside the secret which makes users generating their own a bit easier.

[davecheney]

sgtm

…

On Thu, 4 Jul 2019 at 00:43, Steve Sloka ***@***.***> wrote: ***@***.**** commented on this pull request. Should the secret type use kubernetes.io/tls instead of generic? This way we could have the cert/key's be consistent inside the secret which makes users generating their own a bit easier. — You are receiving this because your review was requested. Reply to this email directly, view it on GitHub <#1203>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AAABYA4JSXZUHSVRZNTDMTTP5S3HZANCNFSM4H4PB26A> .

[youngnick]

Should the secret type use kubernetes.io/tls instead of generic? This way we could have the cert/key's be consistent inside the secret which makes users generating their own a bit easier.

TIL about that type of secret. I'll get right on that, then merge.