Red Hat OpenShift Container Platform

Replacing the CA Bundle certificate

To trust a custom certificate authority for egress connections in Red Hat OpenShift Container Platform, you can replace the CA bundle by creating a config map with your root CA certificate and updating the cluster proxy configuration.

Procedure

Create a config map that includes the root CA certificate used to sign the wildcard certificate:
```
$ oc create configmap custom-ca \
     --from-file=ca-bundle.crt=</path/to/example-ca.crt> \
     -n openshift-config
```
</path/to/example-ca.crt> is the path to the CA certificate bundle on your local file system.

Update the cluster-wide proxy configuration with the newly created config map:

$ oc patch proxy/cluster \
     --type=merge \
     --patch='{"spec":{"trustedCA":{"name":"custom-ca"}}}'