This section describes how to deploy Che with self-signed TLS certificates on OpenShift platform.

Prerequisites

Procedure

  1. Login into OpenShift default project

    $ oc login -u system:admin --insecure-skip-tls-verify=true
$ oc project default

  2. Re-configure router with generated certificate

    $ oc delete secret router-certs
$ cat domain.crt domain.key > minishift.crt
$ oc create secret tls router-certs --key=domain.key --cert=minishift.crt
$ oc rollout latest router

  3. Pre-create namespace for Che

    $ oc create namespace che

  4. Create secret from CA certificate

    $ cp rootCA.crt ca.crt
$ oc create secret generic self-signed-certificate --from-file=ca.crt -n=che

  5. Deploy Che using chectl

    $ chectl server:start --platform=minishift --installer=operator --tls --self-signed-cert