Retrieving photos from HTTPS hosts in Kubernetes

Signer certificates establish the relationship in SSL communication. This step is needed by the Sametime server, specifically for cases where the PhotoURL is using SSL (HTTPS) to access business card photos.

After obtaining the certificate file for the host, follow these steps.

Create a generic secret containing the CA certificate.

kubectl create secret generic ca_certificates --from-file=ca-certificates.crt=ca_certificates

Place the values.yaml file in edit mode.
Add the following line to the values.yaml file.
```
caCertificateSecret: ca_certificates
```
When done, save and close the file.
Apply your changes to the environment.

Verify that you are in the helm directory and run the following command to apply changes. Specify the Sametime deployment name for your environment. The default for Sametime Premium version 12 is sametime.
```
helm upgrade sametime\_deployment\_name .
```
Note: Be sure to include the dot at the end. It is part of the command.

If you are unsure of your deployment name, issue the helm list command to find the name. If you upgraded from an earlier Sametime release, the default name is sametime-meetings.
Restart the pods with the changes. Use the kubectl scale command to scale the pods to zero and then to one that have been changed. You must run the commands for each pod that the change affects.
1. Run the following command to scale the pod to zero.
  
  Scale the pod to zero, where pod_deployment_name is the pod name.
```
kubectl scale deploy pod\_deployment\_name --replicas=0
```
2. Run the following command to scale the pod to one.
```
kubectl scale deploy pod\_deployment\_name --replicas=1
```

Parent Topic: Setting up business cards