Configure TLS
Apply a TLS certificate to an Ingress to enable HTTPS.
Prerequisites
- A TLS certificate (
.crt) and private key (.key) must be ready. - The target Ingress must exist.
Step 1. Create a TLS Secret
Register the TLS certificate as a Kubernetes Secret.
Select Storage → Secrets from the left sidebar. Click the Create secret button in the top right.
| Field | Value |
|---|---|
| Name | Secret name (e.g., my-tls-secret) |
| Namespace | Same namespace as the Ingress |
| Type | kubernetes.io/tls |
| tls.crt | Certificate file content (PEM format) |
| tls.key | Private key file content (PEM format) |
WARNING
The tls.crt and tls.key must be a matching pair. A mismatch will cause TLS handshake failures.
Click Create to save the Secret.
Step 2. Apply TLS to the Ingress
Select Service Discovery → Ingresses from the left sidebar. Click the menu (⋮) at the end of the target Ingress row and select Edit Config.
Click Add TLS in the TLS section.
| Field | Description | Example |
|---|---|---|
| Hosts | Domain to apply TLS to | app.example.com |
| Secret Name | Secret created in Step 1 | my-tls-secret |
Click Update to save.
Step 3. Verify HTTPS access
Open https://app.example.com in a browser. A padlock icon in the address bar confirms TLS is configured correctly.
TIP
Certificates not issued by a recognized public CA (e.g., Let's Encrypt) may display a browser security warning.