Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

TLS, connection with CERT-MANAGER #86

Open
allanian opened this issue Jun 1, 2022 · 0 comments
Open

TLS, connection with CERT-MANAGER #86

allanian opened this issue Jun 1, 2022 · 0 comments

Comments

@allanian
Copy link

allanian commented Jun 1, 2022

Hello, trying to configure TLS certs using cert-manager. But allways geting issue with
/opt/couchbase/var/lib/couchbase/inbox/chain.pem. The file does not exist.
Can you help me with this?

Installed cert-manager with CRD, created self-signed cert (status is ready).
kubectl get certificates -A
NAMESPACE NAME READY SECRET AGE
couchbase apicbdev True server-tls 120m

Couchbase side:

tls:
  generate: false

cluster:
  networking:
    tls:
      secretSource:
        serverSecretName: server-tls
      static:
        serverSecret: server-tls

couchbase values.yaml
`install:
couchbaseOperator: true
admissionController: true
couchbaseCluster: true
syncGateway: false

couchbaseOperator:
name: "couchbase-operator"
cluster:
monitoring:
prometheus:
enabled: true
image: couchbase/exporter:1.0.6

coredns:
searches:

  • couchbase.svc.cluster.local
  • svc.cluster.local
  • cluster.local

tls:
generate: false
expiration: 365
nodeToNodeEncryption:

cluster:
buckets:
managed: true
cluster:
analyticsServiceMemoryQuota: 1Gi
autoFailoverMaxCount: 3
autoFailoverTimeout: 120s
dataServiceMemoryQuota: 6Gi
eventingServiceMemoryQuota: 256Mi
indexServiceMemoryQuota: 1024Mi
searchServiceMemoryQuota: 256Mi
enableOnlineVolumeExpansion: true
networking:
adminConsoleServiceTemplate:
spec:
type: NodePort
disableUIOverHTTP: false
disableUIOverHTTPS: false
dns:
domain: company.com
exposeAdminConsole: true
exposedFeatureServiceTemplate:
spec:
type: LoadBalancer
exposedFeatures:
- admin
- client
- xdcr
tls:
secretSource:
serverSecretName: server-tls
static:
serverSecret: server-tls
platform: aws
security:
adminSecret: ''
password: '111'
username: Administrator
servers:
default:
services:
- data
- index
- query
- search
- analytics
- eventing
size: 3
volumeMounts:
default: couchbase
data: couchbase
volumeClaimTemplates:
- metadata:
name: couchbase
spec:
accessModes:
- ReadWriteOnce
storageClassName: ebs-sc
resources:
requests:
storage: 30Gi
`

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant