How to import nifi registry self-signed certificate to nifi cluster

[Demcheck]

Type of question

General Context

Support question

Hello everyone!
I wanna connect my new nifi cluster provisioned by nifikop with NifI Registry.
But registry use self-signed certificate and I need import it to trustore generated by Cert-Manager.
How can I do it?

NiFiKop version

No response

Golang version

No response

Kubernetes version

No response

NiFi version

No response

[mh013370]

If you insist on using self-signed certs, I would recommend using a common CA to sign the certs for Registry and NiFi. For example, create a self-signer CA independently of nifikop and Registry:

https://cert-manager.io/docs/configuration/selfsigned/

And then in nifikop you can configure SSLSecrets with an issuerRef to tell nifikop which CA to have sign the certs for each nifi pod. You would point to the CA you created above.
https://konpyutaika.github.io/nifikop/docs/5_references/1_nifi_cluster/6_listeners_config#sslsecrets

I'm not sure how you're deploying Registry - can you control which CA signs its certs?