Certificates

Before providing HTTPS access to external services through inbound rules or load balancers, TLS certificates need to be prepared for the access domain or address for HTTPS encryption.

After the platform administrator imports and assigns the TLS certificate to a designated project, developers with corresponding project permissions can use the imported and assigned certificate when using inbound rules and load balancing functions. In the event of certificate expiration, the platform administrator can update the certificate uniformly.

Cautions

The certificate function is not currently supported in public cloud clusters. You can create a secret of the TLS type in the specified namespace as needed.

Procedure

1. In the left navigation pane, click Networking > certificate.

2. Click Create certificate.

3. Configure the relevant parameters according to the following instructions.

   Parameter	Description
   Allocate Project	All projects: Assign the certificate to all projects associated with the current cluster. Specified project: Assign the certificate to the specified project. Not assigned: Do not assign the certificate temporarily. After the certificate is created, you can update the projects that can use the certificate by using the Update project operation.
   Public key	That is, tls.crt. When importing the public key, binary files are not supported.
   Private Key	The tls.key file. When importing a private key, binary files are not supported.

4. Click Create.