How to renew an SSL certificate in an EKS cluster using your own certificates?

The following steps will walk you through connecting an Elastic Kubernetes Service (EKS) cluster and renewing an SSL certificate using your own certificate files in order to configure SSL in the Bold BI site.

1. Connect to your Kubernetes cluster:

   • Run the aws command in the Linux terminal or Windows command prompt.

     aws configure
     

   • Enter the AWS Access Key ID, AWS Secret Access Key, Default Region Name, and Default Output Format in the appropriate fields.

     

   • Update kubeconfig using the below command.

     aws eks --region us-east-1 update-kubeconfig --name [your_eks_cluster_name]
     

     Now you have connected to your EKS cluster successfully.

2. Delete the already existing TLS secret in the bold-services namespace in which the Bold BI site was deployed. Here, we used TLS secret name as bold-tls(default secret name we used in Ingress).

   kubectl delete secret bold-tls -n bold-services --ignore-not-found
   

3. Create new bold-tls secret using the certificate and private key file.

   kubectl create secret tls bold-tls -n bold-services --key <private-key-path> --cert <certificate-path>
   

4. Once created new secret with new certificate files, the site’s SSL will be renewed.