Deploying with Kubernetes and a Trusted Certificate

To deploy FME Flow with a trusted certificate to a Kubernetes cluster, you can run cert-manager in your cluster, which issues the necessary certificates.

Alternatively, you can deploy with a certificate and private key that are already generated.

Use the deployment.certManager.issuerName and deployment.certManager.issuerType parameters in the FME Flow Helm chart to add annotations to the ingress. The annotations instruct cert-manager to issue a certificate for that ingress.

  1. Upload the certificate to the cluster:

    2. kubectl create secret tls fmeserver-tls-cert --key localhost.self.fmeserver.key --cert localhost.self.fmeserver.crt

  2. Install FME Flow, setting the TLS certificate:

    3. Example (Helm v3):

    helm install fmeserver safesoftware/fmeserver-2023-0 --set fmeserver.image.tag=2023.0,

    deployment.tlsSecretName=fmeserver-tls-cert,

    deployment.hostname=localhost

When finished, connect to the FME Flow Web User Interface on http://localhost. For more information, see: