> ## Documentation Index
> Fetch the complete documentation index at: https://docs.envzero.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Using custom CA certificates

> Add custom or self-signed CA certificates to your env zero self-hosted Kubernetes agent using Kubernetes secrets and the customCertificates Helm value.

If you use custom CA certificates in your deployment process, such as self-signed certificates, you can add them to env zero's [Self-Hosted Agent](https://docs.envzero.com/guides/admin-guide/self-hosted-kubernetes-agent).

To do so, you can attach certificates using the `customCertificates` helm value that can be set in the [configuration](https://docs.envzero.com/guides/admin-guide/self-hosted-kubernetes-agent/custom-optional-configuration.md). Its value should be a list of Kubernetes Secret names. Each secret may contain one or more custom certificate files.

For instance, you can add your CA file using the following command in your cluster:

```shell theme={null}
kubectl create secret generic my-self-signed-cert --from-file=my-self-signed-cert.cer --namespace=env0-agent
```

Then, in your Helm values file, add the related config:

```yaml yaml theme={null}
"customCertificates":
  - "my-self-signed-cert"
```

Now you can proceed with the agent [upgrade](https://docs.envzero.com/guides/admin-guide/self-hosted-kubernetes-agent/self-hosted-kubernetes-agent.md#upgrade)/[installation](https://docs.envzero.com/guides/admin-guide/self-hosted-kubernetes-agent/self-hosted-kubernetes-agent.md#installation).

> [!NOTE]
>
> **Node.js scripts**
>
> During env zero deployment some customers may want to use Node.js scripts.
>
> > [!NOTE]
> >
> > To make sure your script using the custom certificates, please add the `NODE_EXTRA_CA_CERTS` environment variable with the value of `/etc/ssl/certs/ca-certificates.crt`. That file contains all the certificates in our agent's pod.

> [!WARNING]
>
> Ignore CA Certs
>
> Set `gitSslNoVerify` to `true` in your helm values to ignore CA certs.

## Next steps

For the full `customCertificates` reference, see its entry in [Custom/optional configuration](https://docs.envzero.com/guides/admin-guide/self-hosted-kubernetes-agent/custom-optional-configuration.md#customcertificates).


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.