Provide Certificates

1. Deploy Manual TLS Certificates

juju deploy manual-tls-certificates

Relate it to the charm requiring TLS Certificates:

juju relate manual-tls-certificates <your-charm>

2. Retrieve the certificate signing request

Retrieve all certificate signing requests that don’t have certificates already provided:

juju run manual-tls-certificates/leader get-outstanding-certificate-requests

For the specific relation ID associated to your charm, retrieve the certificate signing request:

juju run manual-tls-certificates/leader get-certificate-request relation-id=<id>

The output of this action is the certificate signing request, use it to obtain a signed TLS Certificate.

3. Provide the certificate

Once you have the certificate signed, provide it to the requiring charm using this action:

juju run manual-tls-certificates/leader provide-certificate \
  relation-id=<id> \
  certificate="$(base64 -w0 certificate.pem)" \
  ca-chain="$(base64 -w0 ca_chain.pem)" \
  ca-certificate="$(base64 -w0 ca_certificate.pem)" \
  certificate-signing-request="$(base64 -w0 csr.pem)" \
  unit-name="<unit-name>"

At this point the certificate is available for the requirer unit which requested it.