This documentation is for a release that is no longer maintained
See documentation for the latest supported version 3 or the latest supported version 4.Ce contenu n'est pas disponible dans la langue sélectionnée.
Chapter 8. Configuring Custom Certificates
8.1. Overview Copier lienLien copié sur presse-papiers!
Administrators can configure custom serving certificates for the public host names of the OpenShift Enterprise API and web console. This can be done during an advanced installation or configured after installation.
8.2. Configuring Custom Certificates with Ansible Copier lienLien copié sur presse-papiers!
During advanced installations, custom certificates can be configured using the openshift_master_named_certificates
and openshift_master_overwrite_named_certificates
parameters, which are configurable in the inventory file. More details are available about configuring custom certificates with Ansible.
Example 8.1. Example Custom Certificate Configuration with Ansible
8.3. Configuring Custom Certificates Copier lienLien copié sur presse-papiers!
The namedCertificates
section may be listed in the servingInfo
and assetConfig.servingInfo
sections of the master configuration file or in the servingInfo
section of the node configuration file. Multiple certificates can be configured this way and each certificate may be associated with multiple host names or wildcards.
A default certificate must be configured in the servingInfo.certFile
and servingInfo.keyFile
configuration sections in addition to namedCertificates
.
The namedCertificates
section should only be configured for the host name associated with the masterPublicURL
, assetConfig.publicURL
, and oauthConfig.assetPublicURL
settings. Using a custom serving certificate for the host name associated with the masterURL
will result in TLS errors as infrastructure components will attempt to contact the master API using the internal masterURL
host.
Example 8.2. Custom Certificates Configuration
Relative paths are resolved relative to the master configuration file. Restart the server to pick up the configuration changes.