TLS Certificates

Edit online

To create new certificates or rotate existing ones or to fix an invalid or rename your TLS secret, refer to the sections below.

New or Rotating Certificates

Edit online

Note: If you are renewing the TLS certificates, you must first delete the existing Kubernetes secret before continuing.

kubectl delete secret datainsightcerts

If you have TLS certificates, you may load them into Kubernetes as a secret and configure SevOne Data Insight to utilize them.

Load your TLS certificates as a Kubernetes secret.

ls /home/sevone/tls
    tls.crt  tls.key

kubectl create secret tls datainsightcerts \
--key /home/sevone/tls/tls.key \
--cert /home/sevone/tls/tls.crt

Configure the Data Insight instance to enable TLS certificates and then, save it.
Enable the certificates
Important: Please make sure to copy and paste the configuration below as-is in the config file. Spacing is very important and it must match when copied into the config file.
```
spec:
  ingress:
    hosts:
    - "di.customer.com"
    tls:
    - secretName: <SECRET_NAME>
      hosts:
      - "di.customer.com"
```

Optionally, wait for the configuration to be applied.


kubectl wait datainsight di --for condition=Successful

Fix Invalid TLS Secret Name

Edit online

Contains the following topics.

Find your Secret Name
Rename your Secret

SevOne Data Insight expects the TLS certificate secret to be specifically named datainsightcerts.

If you find that your secret is named something else, please rename it to the expected name to avoid any issues.

Find your Secret Name

Edit online

In the spec, TLS secret name will be present in the location <SECRET_NAME>.
```
spec:
  ingress:
    hosts:
    - "di.customer.com"
    tls:
    - secretName: <SECRET_NAME>
      hosts:
      - "di.customer.com"
```
If <SECRET_NAME> is datainsightcerts, you are all set and you do not need to perform any other steps. If it does not say datainsightcerts, proceed to the next section, Rename your Secret.

Rename your Secret

Edit online

Copy the existing certificates to a file.

Example

kubectl get secret <SECRET_NAME> -o yaml > datainsightcerts.yaml

Replace all instances of <SECRET_NAME> with datainsightcerts.

Example

sed -i 's/<SECRET_NAME>/datainsightcerts/g' datainsightcerts.yaml

Add your new secret to Kubernetes.
Example
```
kubectl apply -f datainsightcerts.yaml
```