TLS configuration for Artemis System Service

TLS automation configuration script for Artemis System Service

  1. Run Certs Installer Script. in ./kubernetes/scripts

    chmod +x generate-artemis-certs.sh
    ./generate-artemis-certs.sh
    
  2. You will be prompted to add at least 1 IP(s) to generate your certificate files. Provide IP(s) where your pods and Artemis is running.

    Screenshot 2026-05-06 at 14.37.08.png
  3. Recreate the AMQ-TLS secret while in ./kubernetes

    ### Delete AMQ TLS Secret
    kubectl delete secret activemq-tls -n expertflow
    
    ### Apply AMQ TLS Secret
    kubectl apply -f pre-deployment/static-tls/activemq-tls.yaml
    
  4. When deploying CX Core, update these variables in helm-values/ef-cx-custom-values.yaml

    # helm-values/ef-cx-custom-values.yaml
    efConnectionVars:
        ACTIVEMQ_SSL_VERIFY_HOST: "true"
        ACTIVEMQ_SSL_TRUST_ALL: "false"
    
  5. Restart pods if there are any pods running, to be able to establish a connection with newly generated certificates.

    ### Restart pods in expertflow namespace
    k delete pods -n expertflow --all