Custom certificates on K8S

AI Tools

Custom certificates need to be loaded in MDSS when connecting to services that use a private TLS/SSL certificate like MD Core, storage units, external databases etc. These certificates need to be loaded into the K8S cluster as a secret which can be mounted into the appropriate services by adding the following section to the values file:

mdss_components:

<SERVICE_NAME>:

update_ca: true

customMounts:

- mountPath: "/usr/local/share/ca-certificates/my-custom-cert.crt"

name: my-cert

subPath: cert-data

customVolumes:

- name: my-cert

secret:

secretName: my-custom-cert

An example values file where certificates are loaded into multiple MDSS services can be found on our GitHub repo here: https://github.com/OPSWAT/metadefender-k8s/blob/main/helm_charts/mdss-custom-certs-example.yml

Last updated on

Was this page helpful?