Configuring a custom certificate for License Service Reporter

Learn how to configure a custom certificate for License Service Reporter.

This feature is available from License Service Reporter version 4.2.5.

To configure a custom certificate for License Service Reporter communication, complete the following steps:

1. Change the certificate name to tls.crt.

2. Change the name of the key to tls.key.

3. Run the following command to change the directory to where the certificate and the key are stored:

   cd <certificate_directory>
   

4. Create a secret by using the following command:

   licenseReporterNamespace=$(oc get pods --all-namespaces | grep "ibm-license-service-reporter-instance" | awk {'print $1'})
   kubectl create secret tls ibm-license-service-reporter-certs --key tls.key --cert tls.crt -n ${licenseReporterNamespace}
   

5. Edit the IBMLicenseServiceReporter custom resource to include the certificate. Add the following parameter to the spec section to apply the custom certificate that you created in the previous step:

   httpsCertsSource: custom
   

   For example:

   apiVersion: operator.ibm.com/v1alpha1
   kind: IIBMLicenseServiceReporter
   metadata:
     name: instance
   spec:
     httpsCertsSource: custom
   

   Troubleshooting: If the certificate does not update, restart the ibm-licensing-reporter-operator-xxxx pod.