Once the issuer registration is completed, you can now proceed with the creation of private certificates.
1) Click the "+ Create" button in the upper right corner of the [Certificate Management] - [Private Certificate] tab.
1) Verify the registered private certificate in the [Certificate] - [Private Certificate] tab.
| Item(*is required) | Content |
|---|---|
Cluster*
Select the cluster to generate the certificate
Namespace*
Choose the namespace for selecting the certificate
Certificate Name*
Enter the registered issuer name
Add Yaml
Check if you want to write in yaml format
Issuer Ref*
Enter the registered issuer name
Certificate Secret Name*
Specify the name for the private certificate to be created
Label
Enter the labels you want to register for the certificate
Annotation
Input comments or annotations for the certificate
isCA
Check if CA (Certificate Authority) usage is desired
Commom Name*
Provide at least one of the following: CN (Common Name), DNS list, email address list, IP address list, or URI list
Duration
Specify the requested 'Lifetime' of the certificate. If not set, the default is 90 days, with a minimum of 1 hour.
Input format: {time}h {time}m {time}s Example: Enter 360 hours, 30 minutes, and 40 seconds as 360h30m40s. Specify the interval for renewing the certificate. The default is 2/3 of the issued certificate's lifetime, with a minimum allowed value of 5 minutes.
Input format: {time}h {time}m {time}s Example: Enter 360 hours, 30 minutes, and 40 seconds as 360h30m40s."
Renew Before
Specify the interval for renewing the certificate. The default is 2/3 of the issued certificate's lifetime, with a minimum allowed value of 5 minutes.
Input format: {time}h {time}m {time}s Example: Enter 360 hours, 30 minutes, and 40 seconds as 360h30m40s.
Revision History Limit
Number of CertificateRequests retained for the certificate
Usages
Click the "Add" button and check the purpose you want to use
DNS Names
Enter the DNS list you want to register
Email Addresses
Provide the email address list required for generating private certificates
IP Addresses
Specify the IP address list needed for generating private certificates
Uris
Enter the URI list required for generating private certificates
