This document is to help you to configure HTTPS in the Kubernetes environment.

SSL Certificate Directory

This directory should contain required SSL-specific files for running the reverse proxy in https mode:

1. openiam.crt is he SSL certificate file.
2. openiam.key is the SSL certificate key. It is required.
3. openiam.sslchain.crt file will be used in SSLCertificateChainFile in Apache configurations.
4. openiam.ssl.ca.crt file will be used in SSLCACertificateFile in Apache configurations.

Additionally, either openiam.crt or openiam.sslchain.crt is required.

For the reverse proxy to read and use these files, you need to shift the files into the following folders.

.ssl/

openiam-configmap/.ssl/

In Terraform

rproxy.https.disabled=0

In Helm

--set openiam.rproxy.http=0