<p>I am installing gitlab with helm, I have created the certificate in kubernetes with the below commands.</p>
<p>However when i run the helm install, and i enter the address in the browers (<strong>ip-address.nip.io</strong>) I still get &quot;Your connection is not private&quot; message. I have installed the certificate to my Trusted Root Certificate Authority.</p>
<p>When I inspect the certificate details from the browser, i see that it still shows the <strong>Subject Alternative Name -&gt; DNS Name=ingress.local</strong></p>
<p>I am unable to get the my endpoint of <strong>ip-address.nip.io</strong> from the browser and that is the goal.</p>
<p><strong>K8s certificate</strong></p>
<pre><code>cat &lt;&lt;EOF | cfssl genkey - | cfssljson -bare server
{
  &quot;hosts&quot;: [
    &quot;&lt;ip-address&gt;.nip.io&quot;,
    &quot;registry.&lt;ip-address&gt;.nip.io&quot;,
    &quot;gitlab.&lt;ip-address&gt;.nip.io&quot;,
    &quot;minio.&lt;ip-address&gt;.nip.io&quot;
  ],
  &quot;CN&quot;: &quot;&lt;ip-address&gt;.nip.io&quot;,
  &quot;key&quot;: {
    &quot;algo&quot;: &quot;rsa&quot;,
    &quot;size&quot;: 2048
  }
}
EOF
cat &lt;&lt;EOF | kubectl apply -f -
apiVersion: certificates.k8s.io/v1beta1
kind: CertificateSigningRequest
metadata:
  name: &lt;ip-address&gt;.nip.io
spec:
  request: $(cat server.csr | base64 | tr -d '\n')
  usages:
  - digital signature
  - key encipherment
  - server auth
EOF

kubectl certificate approve &lt;ip-address&gt;.nip.io

kubectl get csr &lt;ip-address&gt;.nip.io -o jsonpath='{.status.certificate}' | base64 --decode &gt; server.crt

kubectl create secret tls &lt;secret-name&gt; --key server-key.pem --cert server.crt
</code></pre>

<p>Check your ingress <strong>hosts</strong> config and <strong>secrets</strong> are properly getting set</p>
<pre><code>spec:
  tls:
  - secretName: cert-secret
    hosts:
    - app.dev.example.com    &lt;---- this entry should match below
  - secretName: dev-wildcard-tls-cert
    hosts:
    - &quot;*.app.example.com&quot;    &lt;---- this entry should match below

  rules:
  - host: app.dev.example.com   &lt;---- this entry should match
    http:
      paths:
      - path: /
        backend:
          serviceName: service-2
          servicePort: 80
  - host: &quot;*.app.example.com&quot;   &lt;---- this entry should match
    http:
      paths:
      - path: /
        backend:
          serviceName: service-1
          servicePort: 80
</code></pre>
