Configuring a custom Secure Sockets Layer (SSL) certificate

You can configure an SSL certificate to encrypt your organization's data exchanged between the browser and the HCL DevOps Velocity (Velocity) application.

Before you begin

You must have completed the following tasks:
  • Ensured that the Kubernetes cluster is set up on the host system and have sufficient cluster-level permission.
  • Installed Helm on the Kubernetes cluster. See Installing Helm.
  • Created an SSL certificate and got the key.pem and certificate.crt file.

About this task

The Helm install will automatically create a self-signed certificate, and it is stored in a default TLS secret with the name accelerate-tls to match the ingress domain. You can update the self-signed certificate with a custom SSL certificate if you have an SSL certificate from a trusted Certifying Authority (CA). To update a custom SSL certificate, create a Kubernetes secret by following the steps in this task. Then, during the Helm installation, specify the secret name using the tls.secret parameter in the helm install command.

Procedure

  1. If you don't have an SSL certificate you can generate an OpenSSL certificate and get the certificate.crt and key.pem files. To create an OpenSSL certificate perform any of the following steps:
    • On the Linux operating system, run the following command in command line to create the certificate and key.
      openssl req -newkey rsa:2048 -nodes -keyout key.pem -x509 -days 365 -out certificate.crt

      The certificate.crt and key.pem files will be created in the directory from which you ran the command.

    • On the Windows operating system, run the following command in Git to create the certificate and key.
      openssl req -newkey rsa:2048 -nodes -keyout key.pem -x509 -days 365 -out certificate.crt

      Git creates the certificate.crt and key.pem files in Program Files\Git\usr\bin directory.

    Note:
    If you do not have an SSL certificate must create an SSL certificate.
  2. Navigate to the directory where the certificate.crt and key.pem files are available and run the following command:
    kubectl create -n <custom_namespace_name> secret tls velocity-custom-tls --key <key.pem> --cert <certificate.crt>
    The following message is displayed: secret/velocity-custom-tls created.