Skip to main content

Domain and TLS

Audience

This page is for operators and maintainers configuring custom domains, TLS automation, and exposure policies.

Goal and Scope

This page explains domain and TLS abstractions in AiOS.

Core Concepts

  • AppSpec only exposes domain and tls
  • tls=auto lets the platform own certificate automation
  • cert-manager is an implementation detail, not direct AppSpec configuration

Standard Workflow

  1. the application requests domain exposure and TLS
  2. the control plane renders desired domain/TLS state
  3. in-cluster certificate components issue and renew certificates
  4. the result feeds back into deployment and domain status