This section describes how to deploy Che with self-signed TLS certificates on OpenShift 4 container platform. We need to grab certificate generated by OpenShift and use it for Che and import it into browser.

Procedure

  1. Login into OpenShift default project

    $ oc login -u kubeadmin -p <password>

  2. Get OpenShift 4 self-signed certificate

    $ oc get secret router-ca -n openshift-ingress-operator -o jsonpath="{.data.tls\.crt}" | base64 -d > ca.crt

  3. Pre-create namespace for Che

    $ oc create namespace che

  4. Create secret from CA certificate

    $ oc create secret generic self-signed-certificate --from-file=ca.crt -n=che

  5. Deploy Che using chectl

    $ chectl server:start --platform=crc --installer=operator --tls --self-signed-cert