Skip to main content

Manual Certificates

Using your own certificate files​

If you are not using Cert Manager, you will need to provide your own TLS certificates.

You will need a set of valid trusted PEM encoded base64 Certificate and Private Key files.

Private Key​

The Private Key file should not be encrypted with a password and should look something like this:

-----BEGIN RSA PRIVATE KEY-----
6BD407785DD187EF...
[your private key content]
-----END RSA PRIVATE KEY-----

Certificate​

Your certificate, or certificate with chain, file should look something like this:

-----BEGIN CERTIFICATE-----
72B4F96GHA32HIR9...
[your cert content]
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
FG729KI048GF10DL...
[your fullchain cert content]
-----END CERTIFICATE-----

Set the file path variables.

export MANUAL_CERT_PRIVATE_KEY_FILE="tls/manual/certificate.key" # Set this to the path to your certificate file ending in `.key`
export MANUAL_CERT_FILE="tls/manual/certificate.pem" # Set this to the path to your certificate or certificate with chain file ending in `.pem` or `.crt`

You can now create a Kubernetes TLS secret and configure it in your Helm values overrides file or provide the file paths to the Helm install command.