ALERT: Some images may not load properly within the Knowledge Base Article. If you see a broken image, please right-click and select 'Open image in a new tab'. We apologize for this inconvenience.

AIOps - Installer doesn't update ingress with correct cert - Kubernetes Ingress Controller Fake Certificate


Article ID: 222930


Updated On:


DX Operational Intelligence DX Application Performance Management CA App Experience Analytics


During installation we selected to secure routes and added customer certificate however browser indicates that certificate is invalid, it seems to be using the ingress certificate 



This happens if the kubernetes doesn't accept the secret you used for ingress, it defaults to the its own certificate.


DX Platform 20.x
DX Operational Intelligence 20.x
DX Application Performance Management 20.x
DX AXA 20.x


Check the cert that you created is correct for the ingress url, wild card DNS name, date, valid certs/ keys

For the above example and use-case:

Solution #1) Generate the certs with SAN as * instead of * 

Solution #2) Change dns definitions and changed wildcard dns as *

Additional Information

DX OI - Troubleshooting, Common Issues and Best Practices