From 0feaafef2b9945017fd37c823c1a3772292e4fab Mon Sep 17 00:00:00 2001
From: Troy McConaghy <troy@bigchaindb.com>
Date: Wed, 28 Jun 2017 16:40:52 +0200
Subject: [PATCH] entire HTTPS cert chain is needed in secret.yaml

---
 k8s/configuration/secret.yaml | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/k8s/configuration/secret.yaml b/k8s/configuration/secret.yaml
index 7c59595b..cccf4788 100644
--- a/k8s/configuration/secret.yaml
+++ b/k8s/configuration/secret.yaml
@@ -94,8 +94,9 @@ type: Opaque
 data:
   # Base64-encoded HTTPS private key
   cert.key: "<b64 encoded HTTPS private key>"
-  # Base64-encoded HTTPS Signed Certificate or Certificate Chain
-  cert.pem: "<b64 encoded HTTPS Signed Certificate or Certificate Chain>"
+  # Base64-encoded HTTPS certificate chain
+  # including all intermediate certificates and the actual certificate
+  cert.pem: "<b64 encoded HTTPS certificate chain"
 ---
 apiVersion: v1
 kind: Secret