Question Regarding Certificate Application in HA Configuration

 Hello @feng

I did a bit of research with the help of AI, so please review with caution 

 

Based on the available resources, here's the information regarding certificates for a high-availability (HA) configuration environment:

1. Components Requiring Certificates:

   • Certificates are typically required for both the load balancer and the servers to ensure secure communication. The load balancer often handles SSL offloading, which means it decrypts incoming requests and encrypts responses. This process requires a certificate. Servers also need certificates if they are accessed directly or if SSL termination happens at the server level 

      
     Source

     .

2. Number of Certificates Needed:

   • The number of certificates required can vary based on the configuration. If all servers and the load balancer are accessed through the same domain name (as indicated by the systemURL in ifscloud-values.yaml pointing to the LB's FQDN), a single certificate with the appropriate Subject Alternative Names (SANs) could suffice. This certificate would then be installed on the load balancer and all servers. However, if different domain names are used or if there's a requirement for individual certificates, you would need one for each server and the load balancer 

     
     Source
     
      

Hello @Nadine  I’ve noticed also this article created by you regarding HA installation. Would you be able to advise on the above or direct Feng to a contact that could help with his queries?

Thank you in advance