What you need:

Configure ZeroSSL

This section provides information on how to set up a ZeroSSL certificate for the cluster ingress. This allows most browsers to validate the certificate for the cluster when users try to log into the operations portal.

  1. Open the kommander.yaml file:

    1. If you do not have the kommander.yaml file, initialize the configuration file, so you can edit it in the following steps. WARNING: Initialize this file only ONCE, otherwise you will overwrite previous customizations.

    2. If you have initialized the configuration file already, open the kommander.yaml with the editor of your choice.

  2. Provide the acquired domain name in the clusterHostname field, enable acme, and add an email and server to register with ZeroSSL's.

    apiVersion: config.kommander.mesosphere.io/v1alpha1
    kind: Installation
    clusterHostname: <mycluster.example.com>
      email: <email>
      server: https://acme.zerossl.com/v2/DV90
  3. Create a DNS record:

    1. You can set up an external-dns service. This way, the external-dns will take care of pointing the DNS record to the ingress of the cluster automatically.

    2. Alternatively, create a DNS record manually, that maps your domain name or IP address to the cluster ingress.

  4. Set up External Account Bindings by customizing the Issuer or ClusterIssuer details, as shown in the Customize Issuer Details section.

  5. Use the configuration file to install Kommander.

Next Topic:

Other ACME Issuers