{
  "id": "add-client-certificates",
  "title": "Add client certificates",
  "url": "https://redis.io/docs/latest/operate/kubernetes/security/certificates/add-client-certificates/",
  "summary": "Add client certificates to your REDB custom resource.",
  "tags": [
    "docs",
    "operate",
    "kubernetes"
  ],
  "last_updated": "2026-07-24T10:52:10-07:00",
  "page_type": "content",
  "content_hash": "f3c33e87a7ee6f5b871a6c92e4e2e8134ab421f5c798bae3ac9197f5611a49c5",
  "sections": [
    {
      "id": "overview",
      "title": "Overview",
      "role": "overview",
      "text": "For each client certificate you want to use with your database, you need to create a Kubernetes secret to hold it. You can then reference that secret in your Redis Enterprise database (REDB) custom resource spec."
    },
    {
      "id": "create-a-secret-to-hold-the-new-certificate",
      "title": "Create a secret to hold the new certificate",
      "role": "content",
      "text": "1. [Create the secret config file](https://kubernetes.io/docs/tasks/configmap-secret/managing-secret-using-config-file/) with the required fields shown below.\n\n    [code example]\n  \n1. Apply the file to create the secret resource.\n\n    [code example]"
    },
    {
      "id": "edit-the-redb-resource",
      "title": "Edit the REDB resource",
      "role": "content",
      "text": "1. Add the secret name to the REDB custom resource (`redb.yaml`) with the `clientAuthenticationCertificates` property in the `spec` section.\n\n  [code example]"
    }
  ],
  "examples": [
    {
      "id": "create-a-secret-to-hold-the-new-certificate-ex0",
      "language": "yaml",
      "code": "apiVersion: v1\n    kind: Secret\n    type: Opaque\n    metadata:\n      name: <client-cert-secret>\n      namespace: <your-rec-namespace>\n    data:\n      cert: <client-certificate>",
      "section_id": "create-a-secret-to-hold-the-new-certificate"
    },
    {
      "id": "create-a-secret-to-hold-the-new-certificate-ex1",
      "language": "bash",
      "code": "kubectl apply -f <client-cert-secret>.yaml",
      "section_id": "create-a-secret-to-hold-the-new-certificate"
    },
    {
      "id": "edit-the-redb-resource-ex0",
      "language": "yaml",
      "code": "spec:\n      clientAuthenticationCertificates:\n      - <client-cert-secret>",
      "section_id": "edit-the-redb-resource"
    }
  ]
}