search

alpha-hack-program / doc-bot

1 stars 1 forks source link

Knative SSL with self-signed cert #1

Closed cvicens closed 3 months ago

cvicens commented 3 months ago

https://access.redhat.com/documentation/en-us/red_hat_openshift_ai_self-managed/2-latest/html/serving_models/serving-large-models_serving-large-models#manually-installing-kserve_serving-large-models

Try to use the previous link to use the OCP cert instead of the self signed cert generated during RHOAI installation.

rbo commented 3 months ago

Be careful while using the same certificate. In case your application use http2 it can cause weird connections problems: https://daniel.haxx.se/blog/2016/08/18/http2-connection-coalescing/

cvicens commented 3 months ago

Thanks Robert for jumping in!! Just to clarify, I want to use a proper cert, Let's encrypt for instance and not a self signed one. I wanted to reuse the wildcard cert of OCP... but it could be different if there could be potential problems like the ones you pointed out when mixing http/1 and /2... Have you done this once knative-serving has been created with a self-signed cert?

rbo commented 3 months ago

Long time ago at RH Training 3-4 Years ago...

cvicens commented 3 months ago

No prob ! Thanks any way Robert!!!

cvicens commented 3 months ago

Solved with this: https://ai-on-openshift.io/odh-rhoai/single-stack-serving-certificate/