Custom certificates on K8S
Custom certificates need to be loaded in MDSS when connecting to services that use a private TLS/SSL certificate like MD Core, storage units, external databases etc. These certificates need to be loaded into the K8S cluster as a secret which can be mounted into the appropriate services by adding the following section to the values file:
mdss_components <SERVICE_NAME> update_catrue customMountsmountPath"/usr/local/share/ca-certificates/my-custom-cert.crt" namemy-cert subPathcert-data customVolumesnamemy-cert secret secretNamemy-custom-certAn example values file where certificates are loaded into multiple MDSS services can be found on our GitHub repo here: https://github.com/OPSWAT/metadefender-k8s/blob/main/helm_charts/mdss-custom-certs-example.yml
Was this page helpful?
