https://docs.shturval.tech/2.13/en/cluster-admin/howto/cert/addcerts/Recent content in Add a certificate to the cluster onHugo -- gohugo.ioTue, 06 Oct 2020 08:48:23 +0000https://docs.shturval.tech/2.13/en/cluster-admin/howto/cert/addcerts/new-certs/Mon, 16 Nov 2020 13:59:39 +0100https://docs.shturval.tech/2.13/en/cluster-admin/howto/cert/addcerts/new-certs/In a deployed cluster of the “Shturval” platform you can: replace the certificate installed during the cluster installation process with an intermediate, corporate one; install the ACME (Automatic Certificate Management Environment) certificate. Certificate replacement script # Make backup of the existing configuration. Add a certificate to the “Shturval” platform cluster: intermediate; certificate ACME; ACME server certificate Let’s Encrypt; corporate. Update certificate settings in system services. This step must be performed if you are adding an intermediate or ACME certificate.https://docs.shturval.tech/2.13/en/cluster-admin/howto/cert/addcerts/backup/Mon, 16 Nov 2020 13:59:39 +0100https://docs.shturval.tech/2.13/en/cluster-admin/howto/cert/addcerts/backup/Before changing the certificate in the cluster, create a backup of resources so that you can quickly roll back the changes. In the cluster, go to the “Backup and Restore” section. Make sure you have S3 storage connected or connect it. Create a backup. Once the backup is created, proceed to add the certificate to the cluster: intermediate; certificate ACME; ACME server certificate Let’s Encrypt; corporate. If you are adding an intermediate or ACME certificate, include it in the copy # Non-namespace resources:https://docs.shturval.tech/2.13/en/cluster-admin/howto/cert/addcerts/services/Mon, 16 Nov 2020 13:59:39 +0100https://docs.shturval.tech/2.13/en/cluster-admin/howto/cert/addcerts/services/If you change certificates (to intermediate, ACME, Let’s Encrypt) in the management cluster, an update is always required: “Platform software control module” (shturval-backend); “Platform graphic control module” (shturval-frontend); “Authentication management module” (shturval-auth). When services such as ArgoCD, Grafana are running in the cluster, then when adding an intermediate or ACME certificate to the cluster, customvalues ​​must be configured in these system services (shturvalserviceconfigs). This will ensure that authorization works correctly when switching to services from the cluster.