Skip to content

Commit e329639

Browse files
committed
Adds tutorial doc for untrusted root CA
Signed-off-by: Zhongcheng Lao <[email protected]>
1 parent d26937d commit e329639

File tree

1 file changed

+42
-0
lines changed

1 file changed

+42
-0
lines changed
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,42 @@
1+
---
2+
title: "Untrusted Root Certificate"
3+
linkTitle: "Untrusted Root Certificate"
4+
weight: 1
5+
date: 2019-08-15
6+
description: >
7+
Using minikube with Untrusted Root Certificate
8+
---
9+
10+
## Overview
11+
12+
Most organizations deploy their own Root Certificate and CA service inside the corporate networks.
13+
Internal websites, image repositories and other resources may install SSL server certificates issued by this CA service for security and privacy concerns.
14+
You may install the Root Certificate into the minikube VM to access these corporate resources within the cluster.
15+
16+
## Prerequisites
17+
18+
- Corporate X.509 Root Certificate
19+
- Latest minikube binary and ISO
20+
21+
## Tutorial
22+
23+
* The certificate must be in PEM format. You may use `openssl` to convert from DER format.
24+
25+
```
26+
openssl x509 -inform der -in my_company.cer -out my_company.pem
27+
```
28+
29+
* You may need to delete existing minikube VM
30+
31+
```shell
32+
minikube delete
33+
```
34+
35+
* Copy the certificate before creating the minikube VM
36+
37+
```shell
38+
mkdir -p $HOME/.minikube/certs
39+
cp my_company.pem $HOME/.minikube/certs/my_company.pem
40+
41+
minikube start
42+
```

0 commit comments

Comments
 (0)