Breadcrumbs

Create Self signed certificates on RKE2

Import your own certificates for RKE 

please modify the <FQDN> with your current fqdn before applying the following command.

  1. Now generate a secret with the following commands.

    Bash
    openssl req -x509 \
    -newkey rsa:4096 \
    -sha256 \
    -days 3650 \
    -nodes \
    -keyout <fQDN>.key \
    -out <FQDN>.crt \
    -subj "/CN=<FQDN>" \
    -addext "subjectAltName=DNS:www.<FQDN>,DNS:<FQDN>"
    
  2. For expertflow namespace:

    Bash
    kubectl -n expertflow create secret tls ef-ingress-tls-secret --key  <fqdn>.key --cert <fqdn>.crt
    
  3. For ef-external namespace

    Bash
    kubectl -n ef-external  create secret tls ef-ingress-tls-secret --key  <fqdn>.key --cert <fqdn>.crt