<p>I am trying to run the helloworld-go example with cert-manager on GKE.<br>
I installed Istio without sidecar injection, cert-manager 0.11 and setup Auto SSL and DNS.
When I run <code>kubectl get ksvc</code> it shows <code>IngressNotConfigured</code>. Any idea why?</p>

<pre><code>$ kubectl get ksvc
NAME            URL                                           LATESTCREATED         LATESTREADY           READY     REASON
helloworld-go   https://helloworld-go.default.redhost.cloud   helloworld-go-mc27h   helloworld-go-mc27h   Unknown   IngressNotConfigured
</code></pre>

<pre><code>$ kubectl describe ksvc helloworld-go
Status:
  Address:
    URL:  http://helloworld-go.default.svc.cluster.local
  Conditions:
    Last Transition Time:        2019-11-26T15:19:51Z
    Status:                      True
    Type:                        ConfigurationsReady
    Last Transition Time:        2019-11-26T15:31:25Z
    Message:                     Ingress has not yet been reconciled.
    Reason:                      IngressNotConfigured
    Status:                      Unknown
    Type:                        Ready
    Last Transition Time:        2019-11-26T15:31:25Z
    Message:                     Ingress has not yet been reconciled.
    Reason:                      IngressNotConfigured
    Status:                      Unknown
    Type:                        RoutesReady
  Latest Created Revision Name:  helloworld-go-mc27h
  Latest Ready Revision Name:    helloworld-go-mc27h
  Observed Generation:           1
  Traffic:
    Latest Revision:  true
    Percent:          100
    Revision Name:    helloworld-go-mc27h
  URL:                https://helloworld-go.default.redhost.cloud
Events:
  Type    Reason   Age                From                Message
  ----    ------   ----               ----                -------
  Normal  Created  23m                service-controller  Created Configuration "helloworld-go"
  Normal  Created  23m                service-controller  Created Route "helloworld-go"
  Normal  Updated  11m (x7 over 23m)  service-controller  Updated Service "helloworld-go"
</code></pre>

<p>Adding the label <code>serving.knative.dev/visibility=cluster-local</code> makes the problem go away, but then it is only accessible internally without SSL.</p>

<p>Problem was I had installed regular Istio, where you specifically need Istio with SDS.
<a href="https://knative.dev/docs/serving/using-auto-tls/" rel="nofollow noreferrer">https://knative.dev/docs/serving/using-auto-tls/</a></p>

<p>Also be sure to use cert-manager 0.10.0 as 0.11.0 is currently unsupported.
<a href="https://github.com/knative/serving/issues/6011" rel="nofollow noreferrer">https://github.com/knative/serving/issues/6011</a></p>

<p>Once I did these everything works:</p>

<pre><code>NAME            URL                                           LATESTCREATED         LATESTREADY           READY   REASON
helloworld-go   https://helloworld-go.default.redhost.cloud   helloworld-go-mc27h   helloworld-go-mc27h   True```
</code></pre>
