How to import a certificate object from environment variables to Kong by using the secret management function

Kong now allows you to import a certificate object from environment variables. What are the steps to implement this?

1. Export your certificate and key as environment variables.

   Here we use MY_SECRET_CERT for the public certificate and MY_SECRET_KEY for the private key.

   export MY_SECRET_CERT='-----BEGIN CERTIFICATE-----
   <YOUR PUBLIC CERTIFICATE CONTENT>
   -----END CERTIFICATE-----'
   
   export MY_SECRET_KEY='-----BEGIN PRIVATE KEY-----
   <YOUR PRIVATE KEY CONTENT>
   -----END PRIVATE KEY-----'

   Copied!

2. Reference MY_SECRET_CERT and MY_SECRET_KEY to create the certificate object in Kong.

   1. If you use a declarative configuration YAML file, create the certificate object like this:

      _format_version: "3.0"
      _transform: true
      
      certificates:
      - id: b0dbe8fd-e5e6-414a-a0dc-0160665620ab
        cert: '{vault://env/my-secret-cert}'
        key: '{vault://env/my-secret-key}'

      Copied!

   2. If you use Kong Manager, create the certificate object as shown below:

3. Restart Kong.

   kong restart

   Copied!