We have Camunda 8 Self managed-Ingress configuration of Camunda platform gRPC is as below:
annotations:
ingress.kubernetes.io/rewrite-target: /
meta.helm.sh/release-name: camunda
meta.helm.sh/release-namespace: pp-dev
nginx.ingress.kubernetes.io/backend-protocol: GRPC
nginx.ingress.kubernetes.io/proxy-buffer-size: 128k
nginx.ingress.kubernetes.io/ssl-redirect: 'true'
managedFields:
- manager: nginx-ingress-controller
operation: Update
apiVersion: networking.k8s.io/v1
time: '2025-09-24T06:24:08Z'
fieldsType: FieldsV1
fieldsV1:
f:status:
f:loadBalancer:
f:ingress: {}
subresource: status
- manager: helm
operation: Update
apiVersion: networking.k8s.io/v1
time: '2025-09-26T09:27:36Z'
fieldsType: FieldsV1
fieldsV1:
f:metadata:
f:annotations:
.: {}
f:ingress.kubernetes.io/rewrite-target: {}
f:meta.helm.sh/release-name: {}
f:meta.helm.sh/release-namespace: {}
f:nginx.ingress.kubernetes.io/backend-protocol: {}
f:nginx.ingress.kubernetes.io/proxy-buffer-size: {}
f:nginx.ingress.kubernetes.io/ssl-redirect: {}
f:labels:
.: {}
f:app: {}
f:app.kubernetes.io/component: {}
f:app.kubernetes.io/instance: {}
f:app.kubernetes.io/managed-by: {}
f:app.kubernetes.io/name: {}
f:app.kubernetes.io/part-of: {}
f:app.kubernetes.io/version: {}
f:helm.sh/chart: {}
f:spec:
f:ingressClassName: {}
f:rules: {}
f:tls: {}
spec:
ingressClassName: nginx
tls:
- hosts:
- projectdomain.dev.echonet
secretName: camunda-tls
rules:
- host: projectdomain.dev.echonet
http:
paths:
- path: /
pathType: Prefix
backend:
service:
name: camunda-zeebe-gateway
port:
number: 26500
status:
In spring boot project our application.properties has the below https gRPC attribute in place :
camunda.client.zeebe.grpc-address=https://projectdomain.dev.echonet/
No more properties is configured related to camunda.client(Please sugguest if any thing we are missing for tls authentication)
Also while starting springboot application in local we are passing the below CLI arugmnent for our keystore and trustStore:
-Djavax.net.ssl.keyStore=C:/Software/cert/https-keystore.jks
-Djavax.net.ssl.keyStorePassword=password
-Djavax.net.ssl.trustStore=C:/Software/cert/truststore.jks
-Djavax.net.ssl.trustStorePassword=password