Home / server / Questions / 1078122
Accepted
Jethro
Asked: 2021-09-21 10:09:17 +0800 CST

How do you use wazuh with cert-manager in kubernetes?

  • 772

The wazuh kubernetes install instructions uses self signed certificates.

Is there a way to use cert-manager/LetsEncrypt certificates instead?

ssl-certificate kubernetes lets-encrypt cert-manager wazuh

1 Answers

  1. Best Answer

    For Kibana, you can easily use Trusted CA Signed SSL Certificates, for example Let's Encrypt, by placing them in cert/kibana_http/

    cp /etc/letsencrypt/live/<site-address>/privkey.pem certs/kibana_http/key.pem
cp /etc/letsencrypt/live/<site-address>/fullchain.pem certs/kibana_http/cert.pem

    For internal communications between the different Wazuh components, self-signed certificates are a good option given that they all verify the CA through a local file. Self-signed certificates also avoid the need for FQDN which is required to get a certificate from a Trusted CA.

    • 1