:_mod-docs-content-type: ASSEMBLY
[id="cert-types-user-provided-certificates-for-default-ingress"]
= User-provided certificates for default ingress
include::_attributes/common-attributes.adoc[]
:context: cert-types-user-provided-certificates-for-default-ingress

toc::[]

[role="_abstract"]
Review user-provided ingress certificates in {product-title}, including transport layer security (TLS) secret storage, `IngressController` references, and replacing Operator-generated defaults.

Use user-provided certificates for the default `IngressController` CR to complete the following tasks:

* Replace Operator-generated default certificates before production use.
* Store TLS secrets in the correct namespace.
* Reference the secret in the `IngressController` CR.



include::modules/user-provided-certificates-ingress-ref.adoc[leveloffset=+1]


[role="_additional-resources"]
[id="additional-resources_{context}"]
== Additional resources

* xref:../../security/certificates/replacing-default-ingress-certificate.adoc#replacing-default-ingress[Replacing the default ingress certificate]
* xref:../../networking/networking_operators/ingress-operator.adoc#nw-ingress-setting-a-custom-default-certificate_configuring-ingress[Setting a custom default certificate]