Skip to content

Restore custom certificates

For each custom certificate you backed up, you must first recreate the certificate as a Kubernetes Secret, and then reference it in your values.yaml file.

Note

You must fulfill the prerequisites before proceeding.

  1. Create a Kubernetes Secret from your certificate file. This example uses rabbit-cert as the secret name. Replace $NAMESPACE with your DataRobot namespace and ./path/to/certificate with the actual path to your backed-up certificate file (e.g., rabbit-cert.pem).

    kubectl -n $NAMESPACE create secret generic rabbit-cert --from-file=rabbit-cert.pem=./path/to/certificate/rabbit-cert.pem
    
    (The --from-file key should match the path value in the YAML below, e.g., rabbit-cert.pem)

  2. In your values.yaml file, create a mapping for this Secret. Paths define where the certificate will be mounted inside the container, within the /opt/datarobot/etc/certs/ directory. For example:

    globals:
      certs:
        # Refers to the Kubernetes Secret created in the previous step
        - secret: rabbit-cert
          # This will be the filename at /opt/datarobot/etc/certs/rabbit-cert.pem
          path: rabbit-cert.pem
    
  3. Repeat this process for all custom certificates that need to be restored.