11.4. Configuring additional CA trust bundles

Prerequisites

• You have cluster administrator permissions on OpenShift Container Platform, or you have cluster or dedicated administrator permissions on Red Hat OpenShift Service on AWS or OpenShift Dedicated.
• You have installed the OpenShift Serverless Operator.
• You have installed the cert-manager Operator for Red Hat OpenShift.

Procedure

• Create a CA bundle for Eventing as follows:

  kind: ConfigMap
  metadata:
    name: <my_org_eventing_bundle> 

  1

  
    namespace: knative-eventing
    labels:
      networking.knative.dev/trust-bundle: "true"
  data: 

  2

  
    ca.crt: ...
    ca1.crt: ...
    tls.crt: ...

  1

  Use a unique name to avoid conflicts with existing or future Eventing config maps.

  2

  All keys with valid PEM-encoded CA bundles are trusted by Eventing clients.