Guides > App-launchpad > Custom-certificates

Learn how to manually set up a custom domain certificate in App Launchpad using Kubernetes secrets and ingress patching.

Successfully set up a custom domain in "App Launchpad" but cannot access the domain, and it shows the certificate is not secure. This is because cert-manager did not successfully issue the certificate. To resolve this issue, we can manually set up the certificate.

First, make sure you have successfully set up CNAME in your cloud provider and have downloaded the certificate corresponding to your domain.

Open "App Launchpad", set a custom domain.

Open the "Terminal", and execute the following commands in sequence.

# Create tls.crt using the certificate file information (replace xxxx with the actual certificate file information).
cat > tls.crt <<EOF
-----BEGIN CERTIFICATE-----
xxxx
-----END CERTIFICATE-----
EOF
 
# Create tls.key using the certificate private key information (replace xxxx with the actual private key information).
cat > tls.key <<EOF
-----BEGIN RSA PRIVATE KEY-----
xxxx
-----END RSA PRIVATE KEY-----
EOF
 
# Create a secret using tls.crt and tls.key.
kubectl create secret tls network-test --cert tls.crt --key tls.key
 
# Check the ingress for the corresponding application.
kubectl get ingress

Modify the ingress (replace xzy-dev.sealos.run with your own custom domain).

kubectl patch ingress network-twvuqmjzckur -p '{"spec":{"tls":[{"hosts":["xzy-dev.sealos.run"],"secretName":"network-test"}]}}'

Custom Certificates