github.com/verrazzano/verrazzano@v1.7.0/platform-operator/thirdparty/charts/mysql-operator/templates/NOTES.txt (about) 1 Create an MySQL InnoDB Cluster by executing: 2 1. When using a source distribution / git clone: `helm install [cluster-name] -n [ns-name] ~/helm/mysql-innodbcluster` 3 2. When using the Helm repo from ArtifactHub 4 2.1 With self signed certificates 5 export NAMESPACE="your-namespace" 6 # in case the namespace doesn't exist, please pass --create-namespace 7 helm install my-mysql-innodbcluster mysql-operator/mysql-innodbcluster -n $NAMESPACE \ 8 --version 2.0.8 \ 9 --set credentials.root.password=">-0URS4F3P4SS" \ 10 --set tls.useSelfSigned=true 11 12 2.2 When you have own CA and TLS certificates 13 export NAMESPACE="your-namespace" 14 export CLUSTER_NAME="my-mysql-innodbcluster" 15 export CA_SECRET="$CLUSTER_NAME-ca-secret" 16 export TLS_SECRET="$CLUSTER_NAME-tls-secret" 17 export ROUTER_TLS_SECRET="$CLUSTER_NAME-router-tls-secret" 18 # Path to ca.pem, server-cert.pem, server-key.pem, router-cert.pem and router-key.pem 19 export CERT_PATH="/path/to/your/ca_and_tls_certificates" 20 21 kubectl create namespace $NAMESPACE 22 23 kubectl create secret generic $CA_SECRET \ 24 --namespace=$NAMESPACE --dry-run=client --save-config -o yaml \ 25 --from-file=ca.pem=$CERT_PATH/ca.pem \ 26 | kubectl apply -f - 27 28 kubectl create secret tls $TLS_SECRET \ 29 --namespace=$NAMESPACE --dry-run=client --save-config -o yaml \ 30 --cert=$CERT_PATH/server-cert.pem --key=$CERT_PATH/server-key.pem \ 31 | kubectl apply -f - 32 33 kubectl create secret tls $ROUTER_TLS_SECRET \ 34 --namespace=$NAMESPACE --dry-run=client --save-config -o yaml \ 35 --cert=$CERT_PATH/router-cert.pem --key=$CERT_PATH/router-key.pem \ 36 | kubectl apply -f - 37 38 helm install my-mysql-innodbcluster mysql-operator/mysql-innodbcluster -n $NAMESPACE \ 39 --version 2.0.8 \ 40 --set credentials.root.password=">-0URS4F3P4SS" \ 41 --set tls.useSelfSigned=false \ 42 --set tls.caSecretName=$CA_SECRET \ 43 --set tls.serverCertAndPKsecretName=$TLS_SECRET \ 44 --set tls.routerCertAndPKsecretName=$ROUTER_TLS_SECRET