Creating the secret
You can create a TLS Secret object in the openshift-config namespace by using the oc CLI or by applying a YAML file to store client certificates and keys that identity providers require for secure communication.
Procedure
-
Create a
Secretobject that contains the key and certificate by running the following command:$ oc create secret tls <secret_name> --key=key.pem --cert=cert.pem -n openshift-config -
Optional: Apply the following YAML to create the secret:
apiVersion: v1 kind: Secret metadata: name: <secret_name> namespace: openshift-config type: kubernetes.io/tls data: tls.crt: <base64_encoded_cert> tls.key: <base64_encoded_key>