Configure HTTPS/TLS for API

Before You Start

  • Obtain a server certificate and private key for the domain you want to use
  • Optionally create a namespace for the HPE Machine Learning Inferencing Software deployment; if not set, the default namespace is used

How to Configure HTTPS/TLS

1. Create a Kubernetes secret

  1. Create a Kubernetes secret with the server certificate and private key:
    AIOLI_TLS_SECRET_NAME=<your-secret-name>
    kubectl create secret tls ${AIOLI_TLS_SECRET_NAME} --cert=<path-to-cert-file> --key=<path-to-private-key> -n <namespace>
  2. Verify that the secret was created:
    kubectl get secret ${AIOLI_TLS_SECRET_NAME} -n <namespace>

2. Update the deployment

  1. Update the deployment to use the secret:
    helm install mlis --values values.yaml --set tlsSecret=${AIOLI_TLS_SECRET_NAME} ...

3. Configure the CLI to use HTTPS

Update the AIOLI_CONTROLLER environment variable with the HTTPS URL:

export AIOLI_CONTROLLER=https://<IP-address>:80