Versions Compared
Key
- This line was added.
- This line was removed.
- Formatting was changed.
...
...
...
...
...
...
...
...
...
📙 You will learn
📙
...
How to update a TLS certificate.
Prerequisites
Audience: IT Professional
Difficulty: Intermediate
Time needed: Approximately 10 minutes
Tools required:
...
N/A
Updating a Certificate
Follow this section to change an existing TLS certificate, if desired.
*If the previous guides were followed, the TLS certificate will be named tf-tls. If a certificate was installed with a different name, replace tf-tls with the name being used.
Acquire a TLS certificate from a trusted provider.
Convert the certificate into base64 encoded PEM format. Follow vendor instructions for converting the current certificate to PEM, if it is not in the correct format.
Delete the existing TLS secret:
Code Block kubectl delete secret tf-tls
Run the following (replacing and with their respective paths):
Code Block kubectl create secret tls tf-tls --key <tls-key> --cert <tls-cert>
Set the Kong deployment name:
Code Block TF_KONG_DEPLOY=$(kubectl get deploy -l app.kubernetes.io/name=kong -o jsonpath='{.items[].metadata.name}')
Restart kong:
Code Block kubectl rollout restart deploy $TF_KONG_DEPLOY
Table of Contents
Table of Contents |
---|