ICE Server Certificate
First, create a mysite.pem file by concatenating the server certificate, the intermediate CA certificate (if applicable), and the root CA certificate:
cat ___SERVER___.cer ___INTERMEDIATE___CA___.cer ___ROOT___CA___cer > mysite.pem
Then, create a private.key file by coping the server certificate's corresponding private key:
cp -p ___SERVER___.key private.key
chmod 0600 private.key
Finally, supply the ICE Server with both files:
kubectl -n ice-release \
create secret tls \
defaultcert \
--cert=mysite.pem \
--key=private.key
kubectl -n ice-arcus \
create secret tls \
arcus-tls \
--cert=mysite.pem \
--key=private.key
If you need to amend the certificates, or if you need to renew the certificates:
kubectl -n ice-release delete secret defaultcert \
&& kubectl -n ice-release \
create secret tls \
defaultcert \
--cert=mysite.pem \
--key=private.key
kubectl -n ice-arcus delete secret arcus-tls \
&& kubectl -n ice-arcus \
create secret tls \
arcus-tls \
--cert=mysite.pem \
--key=private.key