As all JFrog products utilize Router, enabling TLS for any JFrog product is similar.
We will use Xray as an example.
Add the following configuration in Xray’s
values.yaml
to allow Router to bypass initial TLS verification and pull the certificate.router: serviceRegistry: insecure: true
Once configured, a certificate will be generated under
/opt/jfrog/xray/var/data/router/keys
, and Router will only accept HTTPS requests.Ensure that Kubernetes probes communicate with Router over HTTPS by setting
router.tlsEnabled=true
.router: serviceRegistry: insecure: true tlsEnabled: true
Modify the
jfrogUrl
manually to be the name of the Artifactory service. The following is an example with the service name asjfrog-platform-artifactory
and uses HTTPS.xray: jfrogUrl: https://jfrog-platform-artifactory:8082 router: serviceRegistry: insecure: true tlsEnabled: true
When using the JFrog Platform Chart, which is the recommended approach for utilizing multiple JFrog products, we can employ templating to avoid a hardcoded value for the
jfrogUrl
, as demonstrated in the example below.