https://docs.shturval.tech/2.13/en/cluster-admin/howto/cert/addcerts/corp_acme/Recent content in Types of certificates onHugo -- gohugo.ioTue, 06 Oct 2020 08:48:23 +0000https://docs.shturval.tech/2.13/en/cluster-admin/howto/cert/addcerts/corp_acme/stepca/Mon, 16 Nov 2020 13:59:39 +0100https://docs.shturval.tech/2.13/en/cluster-admin/howto/cert/addcerts/corp_acme/stepca/Before proceeding with adding a certificate to the cluster, review the procedure on the How to add a certificate page. Script for adding to a cluster # Create certificate. Place the created certificate in the namespace secret cert-manager (only for intermediate certificate). Configure ClusterIssuer. Update root certificate (CA-bundle). Update certificate settings in system services. To generate an intermediate or ACME certificate for an existing infrastructure, it is suggested to use Step.https://docs.shturval.tech/2.13/en/cluster-admin/howto/cert/addcerts/corp_acme/corpcert/Mon, 16 Nov 2020 13:59:39 +0100https://docs.shturval.tech/2.13/en/cluster-admin/howto/cert/addcerts/corp_acme/corpcert/Before proceeding with adding the certificate to the cluster, create a backup. If there is an error changing the certificate in the cluster, you can use a backup to roll back the changes. Script for adding a corporate certificate to a cluster # Create certificate. Update root certificate in namespace cert-manager. Place the created certificate as a secret of the namespace ingress. Add customvalues in External connection control module shturval-ingress-controller. After adding a corporate certificate to the cluster, additional configuration in system services is not required.https://docs.shturval.tech/2.13/en/cluster-admin/howto/cert/addcerts/corp_acme/lets_encrypt/Mon, 16 Nov 2020 13:59:39 +0100https://docs.shturval.tech/2.13/en/cluster-admin/howto/cert/addcerts/corp_acme/lets_encrypt/Before proceeding with adding a certificate to the cluster, review the procedure on the How to add a certificate page. To create certificates using Let’s Encrypt, the ingress controller must be accessible from the Internet. To implement this requirement, at least one of the following conditions must be met: The external balancer must have a white (public) IP address; A white (public) IP address for IngressVIP must be specified. Script for adding to a cluster # [Configure and add ClusterIssuer to the cluster](#create-and-install-a certificate-in-the-cluster-using-lets-encrypt).