Configuring SSL Certificate for Tanzu Application Platform GUI

When you setup TAP for the first time, you will not have SSL certificate configured for TAP GUI. In this blog post, I will demonstrate the step by step instructions to configure SSL certificate.


  • TAP Is installed and TAP UI is accessible with http
  • You have SSL certificate created for TAP GUI. e.g. using Let’s encrypt
  • SSL Certificate and Private Key file

Configure SSL Certificate for TAP GUI

  • Create a secret for SSL certificate in tap-gui namespace
kubectl create secret tls tap-gui-secret --cert fullchain.pem --key privkey.pem -n tap-gui
secret/tap-gui-secret created
  • Validate the secret is successfully created
kubectl get secret -n tap-gui
NAME                           TYPE                                  DATA   AGE
app-config-ver-9               Opaque                                1      36m
default-token-6wsml     3      25h
private-registry-credentials        1      25h
tap-gui-secret                            2      44m
  • Modify the tap-values.yaml file and add parameters for SSL certificate secret. You need to edit under tap_gui section. Look for bold texts.
  service_type: ClusterIP
  ingressEnabled: "true"
  ingressDomain: "your-ingress-domain"
    namespace: tap-gui
    secretName: tap-gui-secret
      baseUrl: https://tap-gui.your-ingress-domain
        - type: url
      baseUrl: https://tap-gui.your-ingress-domain
        origin: https://tap-gui.your-ingress-domain
  • Update the tap package
tanzu package installed update tap -p -v 1.1.0 --values-file tap11-values.yaml -n tap-install
 Updating installed package 'tap' 
/ Getting package install for 'tap' 
/ Getting package metadata for '' 
- Updating secret 'tap-tap-install-values' 
- Updating package install for 'tap' 
\ Waiting for 'PackageInstall' reconciliation for 'tap' 

| 'PackageInstall' resource successfully reconciled 
Updated installed package 'tap' in namespace 'tap-install'
  • Open a browser and hit the TAP GUI url with https
  • Now, you can access GUI over https.


One thought on “Configuring SSL Certificate for Tanzu Application Platform GUI

Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s