Add Custom Certificates to JFrog Platform

JFrog Installation & Setup Documentation

Content Type
Installation & Setup
ft:sourceType
Paligo

When Artifactory or other products need to access a remote private resource, such as an LDAP server, you will need to add custom certificates for the JFrog Platform to trust these resources.

  1. Create a secret that contains your certificate chain.

    kubectl create secret generic your-certificate-secret --from-file=your-cert.pem -n your-namespace
  2. Specify the certificate secret in the values.yaml. It works the same for all charts.

    global:
      customCertificates:
        enabled: true
        certificateSecretName: your-certificate-secret

    During redeployment, the chart will modify one of the initContainers for Artifactory, Xray, or other products to copy the certificates into the trusted directory. This allows the application to load and trust them internally.

    Note

    When using global.customCertificates within the JFrog Platform chart, all enabled products will load the certificates.