Skip to content

SSL

Self Signed Certificates

Self-signed and private CA certificates are handled the same way for Huddo Boards and Huddo. See Self-Signed Certificates.

Manual mounting (older charts)

Note

Only required on huddo-boards < 2.1.0 / huddo-boards-cp < 2.3.0, which lack global.internalCa.

Create the secret as in Option 2, then mount it into each applicable deployment (core, app, user, provider, events) and set NODE_EXTRA_CA_CERTS yourself:

global:
  env:
    NODE_EXTRA_CA_CERTS: /etc/ssl/certs/internal-ca.pem

core:
  volumes:
    - name: ssl-cert-vol
      secret:
        secretName: internal-ca
  volumeMounts:
    - name: ssl-cert-vol
      mountPath: /etc/ssl/certs/internal-ca.pem
      subPath: cert.pem

# repeat the same volumes / volumeMounts for app, user, provider and events