How to Provision n8n with a Root Certificate on EKS?

Questions
1

I am a beginner n8n user and have always installed it on a VPS. However, now I need to implement it at my company using EKS.

I managed to provision it, but every virtual machine, server, or application must have the root certificate installed. Because of this, n8n cannot communicate using SSL, and I am unable to receive the free license due to a certificate chain error.

I checked the documentation and only found ways to install a custom certificate using Composer or the Docker CLI.

How can I provision n8n with a root certificate on EKS?

2

It looks like your topic is missing some important information. Could you provide the following if applicable.

  • n8n version:
  • Database (default: SQLite):
  • n8n EXECUTIONS_PROCESS setting (default: own, main):
  • Running n8n via (Docker, npm, n8n cloud, desktop app):
  • Operating system:
3

You could mount a PV at /opt/custom-certificates, and put the root certificate(s) in there. More info here.

This sounds like they not only need this certificate for internal resources, but also are using a MITM proxy (likely to analyze) all outgoing traffic. Just FYI, this is currently not officially supported in n8n, and if you see any unusual certificate issues even after adding the root cert, they are likely to be because of this proxy.

1 Like
4

You are right, we use a firewall that decrypts all outbound communication, which is why the certificate is required.

I added the certificate in /opt/custom-certificates.

I also added it to the pod running n8n.

From within the pod, I can successfully use curl to access ipinfo.io. The same happens when using the “Execute Command” node. However, when using the HTTP Request block, I receive the error:

“SSL Issue: consider using the ‘ignore SSL Issues’ option.”

When I enable this option, it works, but the company requires SSL to be used.

Any idea what might be causing this?