Private CA and Self-Signed Certificate support
A private Certificate Authority (CA) is an organization-specific service that issues and manages digital certificates for use within an enterprise’s private network. These certificates secure communication between internal applications and services.
By default, self signed or privately signed certificates are not automatically trusted by clients because they are not included in the public trust stores used by operating systems and browsers.
DevOps Loop supports configuring and trusting such private CA or self-signed certificates so that secure connections to internal systems can be established.
During installation or upgrade, DevOps Loop reads CA certificates from a Kubernetes secret specified by the Helm parameter
global.privateCaBundleSecretName. These certificates are then added
to internal trust store of DevOps Loop
so that integrations and plugins can establish encrypted, trusted connections to systems
that use private CA or self-signed certificates.
You can also reference the same secret using global.ibmCertSecretName
when using self-signed certificates to simplify configuration.
