How to use custom TLS certificate with ingress addon


  • This tutorial will show you how to configure custom TLS certificatate for ingress addon.
  • mkcert is a simple tool for making locally-trusted development certificates. It requires no configuration.


  • Start minikube
$ minikube start
  • Create TLS secret which contains custom certificate and private key
$ kubectl -n kube-system create secret tls mkcert --key key.pem --cert cert.pem
  • Configure ingress addon
$ minikube addons configure ingress
-- Enter custom cert(format is "namespace/secret"): kube-system/mkcert
βœ…  ingress was successfully configured
  • Enable ingress addon (disable first when already enabled)
$ minikube addons disable ingress
πŸŒ‘  "The 'ingress' addon is disabled

$ minikube addons enable ingress
πŸ”Ž  Verifying ingress addon...
🌟  The 'ingress' addon is enabled
  • Verify if custom certificate was enabled
$ kubectl -n ingress-nginx get deployment ingress-nginx-controller -o yaml | grep "kube-system"
- --default-ssl-certificate=kube-system/mkcert

Last modified August 1, 2021: Update (9197a5918)