TLS Configuration in RabbitMQ for Xray Helm Chart

Enable RabbitMQ TLS in Xray Helm chart (v3.78.10+) with autogenerated or custom certificates via values.yaml.

This feature requires Xray version 3.78.10 or later.

  1. Set rabbitmq.auth.tls.enabled to true in the values.yaml file.

    rabbitmq:
       auth:
           tls:
              enabled: true
  2. Choose whether RabbitMQ generates certs or you supply your own.

    • Set rabbitmq.auth.tls.autogenerated to true in the values.yaml file so that RabbitMQ generates the certs.

      rabbitmq:
         auth:
             tls:
                enabled: true
                autogenerated: true
    • Set rabbitmq.auth.tls.autogenerated to false in the values.yaml file to use your own certs.

      rabbitmq:
         auth:
             tls:
                enabled: true
                autogenerated: false
  3. To use your own certs, pass them either as a Kubernetes secret or through the values.yaml file.

    Pass Certs as a Kubernetes Secret

    To pass your certs as a Kubernetes secret, set rabbitmq.auth.tls.existingSecret with the secret name.

    rabbitmq:
       auth:
           tls:
              enabled: true
              autogenerated: false
              existingSecret: <secret name>

    Pass Certs in the values.yaml file

    To pass your certs in the values.yaml file, set the following values.

    • CA certificate information in rabbitmq.auth.tls.caCertificate
    • Server certificate information in rabbitmq.auth.tls.serverCertificate
    • Server RSA private key information in rabbitmq.auth.tls.serverKey
    rabbitmq:
       auth:
           tls:
              enabled: true
              autogenerated: false
              caCertificate: |-
              -----BEGIN CERTIFICATE-----
              ...
              -----END CERTIFICATE-----
              serverCertificate: |-
              -----BEGIN CERTIFICATE-----
              ...
              -----END CERTIFICATE-----
              serverKey: |-
              -----BEGIN RSA PRIVATE KEY-----
              ...
              -----END RSA PRIVATE KEY-----
  4. Run the following command to apply the values.yaml in the Xray installation.

    helm upgrade --install xray -f values.yaml --namespace xray jfrog/xray

    You can also run a fresh Xray installation with this updated values.yaml along with the other requirements in Xray Single Node Helm Installation.

Disable TLS in RabbitMQ for Xray in Xray Helm Chart

To disable TLS in RabbitMQ, set rabbitmq.auth.tls.enabled to false in the values.yaml file and run the following command.

helm upgrade --install xray -f values.yaml --namespace xray jfrog/xray