Configuring TLS

Use transport layer security (TLS) to create secure connections from OneDB clients to the OneDB database server. By default, TLS is disabled. To enable TLS connections, set the tls.tlsconfig helm chart parameter value to true.

The following helm chart parameters also need to be set:
  • tlskey: The base64 encoded value of the private key.

  • tlscert: The base64 encoded value for the Public signed server certificate.

  • tlscacert: The base64 encoded value of the certificate authority root certificate.

Example tls configuration:
tls: 
    tlsconfig: true 
    tlskey:  LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0t.... 
    tlscert: LS0tLS1CRUdJTiBABEFUSUZJQ0FURS0tLS0t... 
    tlscacert: LS0tLS1CRUdJTiBDRVJUSUEEFZFURS0tLS0t....