Configuring a custom Secure Sockets Layer (SSL) certificate

You can configure an SSL certificate to encrypt your organization's data exchanged between the browser and the HCL DevOps Velocity (Velocity) application.

Before you begin

You must have performed the following tasks:
  • Created a Kubernetes cluster, activated Cloud Shell, added a node pool and created a namespace on the Kubernetes cluster. See Installation prerequisites.
  • Created an SSL certificate and got the key.pem and certificate.crt file.

About this task

The Helm install will automatically create a self-signed certificate, and it is stored in a default TLS secret with the name accelerate-tls to match the ingress domain. You can update the self-signed certificate with a custom SSL certificate if you have an SSL certificate from a trusted Certifying Authority (CA). To update a custom SSL certificate, create a Kubernetes secret by following the steps in this task. Then, during the Helm installation, specify the secret name using the tls.secret parameter in the helm install command.

Procedure

  1. On the Cloud Shell terminal navigate to the directory where you have the key.pem and certificate.crt files of your SSL certificate.
    Note:
    If you do not have an SSL certificate must create an SSL certificate.
  2. Run the following command:
    kubectl create -n <custom_namespace_name> secret tls velocity-custom-tls --key <key.pem> --cert <certificate.crt>
    The following message is displayed: secret/velocity-custom-tls created.