Open

You will learn

How to update a TLS certificate.

Prerequisites

Audience: IT Professional
Difficulty: Intermediate
Time needed: Approximately 10 minutes
Tools required: N/A

Updating a Certificate

Follow this section to change an existing TLS certificate, if desired.

1. Acquire a TLS certificate from a trusted provider.
   
   

2. Convert the certificate into base64 encoded PEM format. Follow vendor instructions for converting the current certificate to PEM, if it is not in the correct format.
   
   

3. Delete the existing TLS secret:

   kubectl delete secret tf-tls

    

4. Run the following (replacing and with their respective paths):

   kubectl create secret tls tf-tls --key <tls-key> --cert <tls-cert>

    

5. Set the Kong deployment name:

   TF_KONG_DEPLOY=$(kubectl get deploy -l app.kubernetes.io/name=kong -o jsonpath='{.items[].metadata.name}')

    

6. Restart kong:

Table of Contents