1.2. Configuring Sensor to trust custom certificates

Procedure

1. In the RHACS portal, go to Platform Configuration Clusters.
2. Click New Cluster and specify a name for the cluster.

3. If you are deploying the Sensor in the same cluster, accept the default values for all the fields. Otherwise, if you are deploying into a different cluster, replace the address central.stackrox.svc:443 with a load balancer, node port, or other address (including the port number) that is accessible from the other cluster in which you are planning to install.

   注意

   If you are using a non-gRPC capable load balancer, such as HAProxy, AWS Application Load Balancer (ALB), or AWS Elastic Load Balancing (ELB) use the WebSocket Secure (wss) protocol. To use wss:

   1. Prefix the address with wss://, and
   2. Add the port number after the address, for example, wss://stackrox-central.example.com:443.
4. Click Next to continue.
5. Click Download YAML File and Keys.

Procedure

1. Unzip the Sensor bundle:

   $ unzip -d sensor sensor-<cluster_name>.zip

2. Run the following command to create the secret:

   $ ./sensor/ca-setup-sensor.sh -d sensor/additional-cas/

   where:

   -d

   Specifies a directory containing custom certificates.

   重要

   If you get the "secret already exists" error message, re-run the script with the -u option:

   $ ./sensor/ca-setup-sensor.sh -d sensor/additional-cas/ -u

3. Continue Sensor deployment by using the YAML files.