Custom Domain and TLS Certificate Configuration

To use a custom domain with TLS on your SambaStack deployment, follow these steps:

This guide is for SambaStack Hosted deployments only.

Step 1: obtain TLS certificates

Acquire the TLS certificate and private key for your domain from a trusted certificate authority.

Step 2: create Kubernetes TLS secret

Follow the official Kubernetes documentation to create a Kubernetes secret for your TLS certificate and key. Example command:

kubectl create secret tls <name-for-tls> \
  --cert=path/to/cert.crt \
  --key=path/to/key.key

Step 3: configure DNS records

Create DNS records to map your custom domains to the SambaStack servers as follows:

Domain	Record Type	Value
`api.example.com`	CNAME	`api.sambanova.ai`
`api.example.com`	TXT	`<From installer log>`
`ui.example.com`	CNAME	`cloud.sambanova.ai`
`ui.example.com`	TXT	`<From installer log>`

Contact SambaNova support to confirm your regional endpoint, if needed.

Step 4: Update sambastack.yaml

Edit the sambastack.yaml configuration file under data → sambastack.yaml to include your domain and TLS secret information with correct indentation:

data:
  sambastack.yaml: |
    gateway:
      ingress:
        hosts:
          - host: api.example.com
            tlsSecretName: <name-for-tls>
    cloud-ui:
      ingress:
        hosts:
        - host: ui.example.com
          tlsSecretName: <name-for-tls>

See the SambaStack.yaml Reference for a full example.

Step 5: apply configuration

Apply your changes:

kubectl apply -f sambastack.yaml

Step 6: sanity check

Monitor the installer logs to verify TLS certificate processing and domain verification:

kubectl -n sambastack-installer logs -l sambanova.ai/app=sambastack-installer -f

After applying these changes, your SambaStack deployment will use the specified custom domains and TLS certificates.

Getting Started

Service Administration

Hardware Administration

Reference Architecture

Resources

Custom domain and TLS certificate configuration

Step 1: obtain TLS certificates

Step 2: create Kubernetes TLS secret

Step 3: configure DNS records

Step 4: Update sambastack.yaml

Step 5: apply configuration

Step 6: sanity check

​Step 1: obtain TLS certificates

​Step 2: create Kubernetes TLS secret

​Step 3: configure DNS records

​Step 4: Update sambastack.yaml

​Step 5: apply configuration

​Step 6: sanity check

Step 1: obtain TLS certificates

Step 2: create Kubernetes TLS secret

Step 3: configure DNS records

Step 4: Update sambastack.yaml

Step 5: apply configuration

Step 6: sanity check