Configuring a custom Secure Sockets Layer (SSL) certificate

You can configure an SSL certificate to encrypt your organization's data exchanged between the browser and the HCL DevOps Velocity (Velocity) application.

Before you begin

You must have performed the following tasks:
  • Created a Kubernetes cluster, configured Azure CLI, added a node pool and created a namespace on the Kubernetes cluster. See Installation prerequisites.
  • Created an SSL certificate and got the key.pem and certificate.crt file.

About this task

The Helm install will automatically create a self-signed certificate, and it is stored in a default TLS secret with the name accelerate-tls to match the ingress domain. You can update the self-signed certificate with a custom SSL certificate if you have an SSL certificate from a trusted Certifying Authority (CA). To update a custom SSL certificate, create a Kubernetes secret by following the steps in this task. Then, during the Helm installation, specify the secret name using the tls.secret parameter in the helm install command.

Procedure

  1. Perform the following steps to install the Helm chart on the machine where you have generated the Helm chart and configured the Azure CLI:
    1. Sign in to Azure.
      Run the following command:
      az login
    2. Set the Azure subscription that contains the Azure Kubernetes Service (AKS) cluster.
      Run the following command:
      az account set --subscription <subscription_name_or_id>
    3. Configure kubectl to access the AKS cluster.
      Run the following command:
      az aks get-credentials \
      --resource-group <resource_group_name> \
      --name <aks_cluster_name>
                                  
    4. Optional: Verify that you are connected to the AKS cluster.
      Run the following commands:
      kubectl config current-context
      kubectl get nodes
  2. Navigate to the directory where you have the key.pem and certificate.crt files of your SSL certificate.
    Note:
    If you do not have an SSL certificate must create an SSL certificate.
  3. Run the following command:
    kubectl create -n <custom_namespace_name> secret tls velocity-custom-tls --key <key.pem> --cert <certificate.crt>
    The following message is displayed: secret/velocity-custom-tls created.