# SSL certificate deployment on Kong

**URL:** <https://discuss.konghq.com/t/ssl-certificate-deployment-on-kong/11737>\
**Category:** General\
**Tags:** plugins, kong-gateway\
**Created:** [August 2, 2023, 8:37am UTC](https://discuss.konghq.com/t/ssl-certificate-deployment-on-kong/11737 "2023-08-02T08:37:52Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Arun\_Julme](https://yyz2.discourse-cdn.com/flex036/user_avatar/discuss.konghq.com/arun_julme/32/4064_2.png) [@Arun\_Julme](https://discuss.konghq.com/u/Arun_Julme)\
**Post date:** [August 2, 2023, 8:37am UTC](https://discuss.konghq.com/t/ssl-certificate-deployment-on-kong/11737/1 "2023-08-02T08:37:52Z")

</div>

Hi Team,

I deployed Kong in k8s cluster without having an ingress controller , exposed as a Load Balancer , suggest me how to deploy SSL certificate on Kong.

Thanks,  
Arun.

---

<div class="post-metadata">

**Author:** ![trustworthygoblin](https://yyz2.discourse-cdn.com/flex036/user_avatar/discuss.konghq.com/trustworthygoblin/32/4395_2.png) [@trustworthygoblin](https://discuss.konghq.com/u/trustworthygoblin)\
**Post date:** [August 3, 2023, 1:40pm UTC](https://discuss.konghq.com/t/ssl-certificate-deployment-on-kong/11737/2 "2023-08-03T13:40:05Z")

</div>

You have to create tls secret -

Example -  
`kubectl create secret tls kong-gateway-tls-secret -n kong --key /path/to/cert.key --cert /path/to/cert.crt`

After that mount that secret using helm secretVolumes as follows -

```auto

#Inject specified secrets as a volume in Kong Container at path /etc/secrets/{secret-name}/

secretVolumes:

- kong-gateway-tls-secret

```

After that simply add those paths to cert and key mapping in env section of helm as follows -

```auto
env:

ssl_cert: '/etc/secrets/kong-gateway-tls-secret/tls.crt'

ssl_cert_key: '/etc/secrets/kong-gateway-tls-secret/tls.key'

```

Make sure to add DNS record with LoadBalancerIP.

Let me know if that helps 🙂 .

---

<div class="post-metadata">

**Author:** ![Arun\_Julme](https://yyz2.discourse-cdn.com/flex036/user_avatar/discuss.konghq.com/arun_julme/32/4064_2.png) [@Arun\_Julme](https://discuss.konghq.com/u/Arun_Julme)\
**Post date:** [August 11, 2023, 9:40am UTC](https://discuss.konghq.com/t/ssl-certificate-deployment-on-kong/11737/3 "2023-08-11T09:40:01Z")

</div>

Hi Team,

I have gone with the same setup in Kong config  
env:  
ssl: “on”  
ssl\_cert: “/etc/secrets/kong-my-tls-secret/tls.crt”  
ssl\_cert\_key: “/etc/kong-secrets/my-tls-secret/tls.key”

secretVolumes:

- kong-my-tls-secret

this is working fine for my Kong setup to enable TLS configuration without a ingress , thanks.