Configure Hub

Before you start

Goal

• Complete the configuration of the Altair SLC Hub server with custom certificates.

Prerequisites

• Complete the initial install, with the extra settings.
• Get the certificates.
• Install the certificates.

Configure the certificate locations

On the main hub server host, create a copy of the internalingress.yaml file called internalingress_custom.yaml, ensure the ownership and permissions are correct and add the following settings depending on whether the certificate has been signed with a Self-Signed Certificate, or by a commercial 3rd Party.

To use a Self-Signed (Private) Certificate AuthorityTo use a Commercial (Public) Certificate Authority from the host operating system

internalingress:
    tls:
        enabled: true

internalingress:
    tls:
        enabled: true

        rootCaFile:
            private: false
            path: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem

Turn on TLS

Now the certificates are installed, activate TLS on the Hub server host with the following command:

    hubctl internaltls

Verification

The install should complete

• Continue the install process.