TLS configuration instructions

To enable tls globally please set ingress.tls.enabled=true in values.yaml

Note: this page covers the Ingress path. If you’re using Gateway API instead (or alongside it), TLS is configured differently – as a Gateway listener setting, not a per-Ingress one – see the TLS section of that doc.

Let’s Encrypt setup

If you want to configure letsencrypt certification, you need to:

1. Set ingress.tls.source="letsEncrypt" in values.yaml

2. Create namespace for cert-manager

kubectl create namespace cert-manager

1. Add repository and update repos list

  helm repo add jetstack <https://charts.jetstack.io>
  helm repo update

1. Install cert-manager release

  helm install \
    cert-manager jetstack/cert-manager \
    --namespace cert-manager \
    --version v1.15.3 \
    --set crds.enabled=true

1. After that, waldur release is ready for installation.

Your own certificate

In case, when you want to use own certificate, you need to:

1. Set ingress.tls.source="secret" in values.yaml

2. Set ingress.tls.secretsDir variable to directory

   with your tls.crt and tls.key files. By default it is set to tls

3. After that, waldur release is ready for installation