Certificates
When attaching a service to an instance, Unikraft Cloud exposes the instance on a subdomain of unikraft.app by default.
It automatically issues a certificate for the domain from a public certificate authority.
Custom certificates
You can upload your own certificate to use with your services:
Make sure that the common name given ends with a dot (.).
Unikraft Cloud checks both the CN and SAN fields of the certificate.
The provided common name (CN) must match the one on the certificate file, and the certificate must be valid for the domain you want to use.
It can also be a wildcard domain.
Use the CLI to view and manage certificates. For example, to list certificates:
You should see output like:
Retrieve full information about a certificate with:
You should see output like:
Attaching certificates to services
You attach the certificate to a service group implicitly. You do this by creating an instance with a domain that matches the common name of the certificate:
To remove a certificate, first remove any instances from the relevant service and then remove the service. Remove the certificate with:
Learn more
- The CLI reference and the legacy CLI reference.
- Unikraft Cloud's REST API reference and, in particular, the section on certificates.
- The domains documentation for more information on how to expose your services on custom domains.