When Artifactory or other products need to access a remote private resource, such as an LDAP server, you will need to add custom certificates for the JFrog Platform to trust these resources.
Create a secret that contains your certificate chain.
kubectl create secret generic your-certificate-secret --from-file=your-cert.pem -n your-namespace
Specify the certificate secret in the values.yaml. It works the same for all charts.
global: customCertificates: enabled: true certificateSecretName: your-certificate-secret
During redeployment, the chart will modify one of the initContainers for Artifactory, Xray, or other products to copy the certificates into the trusted directory. This allows the application to load and trust them internally.
Note
When using
global.customCertificates
within the JFrog Platform chart, all enabled products will load the certificates.