---
sourceDocument: Brazil Workflow Data Fabric
sourceDocumentLink: https://www.servicenow.com/docs/r/integrate-applications

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Workflow Data Fabric

ft:clusterId :

    - crint

bundleId :

    - crint

workflow :

    - Creator


---

# Set up the Kubernetes spoke

# Set up the Kubernetes spoke {#ariaid-title1}

Release version: Brazil  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 2 minutes to read  
Integrate the ServiceNow
instance and Kubernetes using an API key and certificate to authenticate ServiceNow requests.

## Before you begin

* Request an Integration Hub subscription.
* Activate the Kubernetes spoke.
* Role required: admin.
{#set-up-kubernetes__ul_l2l_mph_gfb}

## Generate Kubernetes API token and certificate {#ariaid-title2}

Generate an access token and a certificate from your Kubernetes account for API key
authentication.

### Before you begin

Kubernetes requirements:

* Kubernetes account.
* Role required: administrator with credentials on the host machine where Kubernetes is installed.
{#configure-kubernetes__ul_nhk_cnh_gfb}

### About this task

Complete these steps from your Kubernetes host machine. See [Kubernetes
documentation](https://kubernetes.io/docs) for instructions on generating your API token and client certificate.

### Procedure

1. From your Kubernetes host machine, generate an access token to interact with Kubernetes APIs.  
   This token does not expire.
2. Copy and record the access token to create Credential records on your ServiceNow instance.
3. Generate a client certificate to upload to your ServiceNow instance.
{#configure-kubernetes__steps_j3p_ndz_4fb}

## Upload Kubernetes client certificate {#ariaid-title3}

Upload the Kubernetes client certificate to your ServiceNow instance to authenticate
API requests to the Kubernetes host machine.

### Before you begin

Role required: admin.

### Procedure

1. Navigate to AllSystem LDAPCertificates.
2. Click New.
3. Complete the form and enter the certificate in the PEM Certificate field.  
   For more information about uploading certificates, see [Upload a certificate to
   an instance](https://www.servicenow.com/docs/access?context=t_UploadACertificateToAnInstance&version=brazil&pubname=brazil-platform-security&ft:locale=en-US).
4. Click Submit.

## Configure a connection for the Kubernetes spoke {#ariaid-title4}

Add and configure the Kubernetes connection to authenticate ServiceNow requests in
Kubernetes spoke.

### Before you begin

Role required: admin

### Procedure

1. Navigate to AllProcess AutomationWorkflow Studio.
2. Click the Integrations tab.
3. Under Connections, toggle and enable the Outbound connections.
4. Locate the alias for Kubernetes and click View Details.  
   * To configure the default connection and credential alias record that is shipped along with the Kubernetes spoke, click View Details.

   * To manage more than one Kubernetes spoke connection records, you should create a new child alias record by clicking Add Connection. For more information about using multiple connections, see [Supporting multiple connections](https://www.servicenow.com/docs/D9pGgVwvfvFrzWX3lknyWg "Support several connections to a single integration provider. Select connections for flows, subflows, and actions directly from a flow.").

   {#kubernetes-conf-temp__ul_rb41_w2e_pbc}

   If you are configuring the spoke for the first time, click Configure. Otherwise, click Edit.

5. On the Connection form, fill in the fields.  
   {#kubernetes-conf-temp__table_t4f_jgj_xwf__entry__2}

   | Field | Description |
   |-|-|
   | Connection Name | Name to identify the Kubernetes connection alias record. |
   | Connection URL | IP address and port of the host machine where Kubernetes is installed. |
   | API Key | Token you obtained from Kubernetes in this format: <kbd class="ph userinput">Bearer {access token}</kbd>. |
   [ ]

   {#kubernetes-conf-temp__table_t4f_jgj_xwf}
6. Click Configure Connection.

### Result

The spoke connection is configured and ready to be used.

## Turn off remote SSL host verification {#ariaid-title5}

A system property prevents the Kubernetes spoke from processing Kubernetes responses. Set the
com.glide.communications.httpclient.verify_hostname system property
to false to enable the integration.

### Before you begin

Role required: admin.

### Procedure

1. Enter <kbd class="ph userinput">sys_properties.list</kbd> in the application navigator.  
   The System Properties \[sys_properties\] table opens.
2. Search for the com.glide.communications.httpclient.verify_hostname system property.
3. Set the value to false.

*[\>]: and then