Qlik Sense on Kubernetes: Authentication not working when using an Identity Provider that uses a self-signed certificate

When using an Identity Provider that uses a self-signed certificate or certificate not issued by a public certificate authority, the authentication does not work.
A common error in such a case is: {"errors":[{"title":"Invalid identity provider configuration","code":"INVALID-IDP-CONFIG","status":"401"}]}

Environments:

• Qlik Sense Enterprise on Kubernetes April 2019 and later

In order to use a self-signed certificate, the Certificate Authority certificate chain needs to be added in the values.yaml file:
 

...
global:
  certs:
    # enable/ disable the usage of a global CA certificate
    #
    enabled: true
    configMap:
      # enable/ disable creating a CA certificate ConfigMap
      #
      create: true
      # A templated CA certificate configMap name based on the release name
      #
      name: "{{ .Release.Name }}-ca-certs"
      # The global CA certificate chain
      # This replaces any existing CA trust chain with the supplied one
      #
      certs: |+
        -----BEGIN CERTIFICATE-----
        MIIDLDCCAhSgAwIBAgIQANxWuceSqgA8h3fJ1Q7ZiTANBgkqhkiG9w0BAQsFADAm
        MSQwIgYDVQQDDBtRbGlrU2VydmVyMi5kb21haW4ubG9jYWwtQ0EwHhcNMTcwOTA5
        MTA1NjMwWhcNMjcwOTE2MTA1NjMwWjAmMSQwIgYDVQQDDBtRbGlrU2VydmVyMi5k
        b21haW4ubG9jYWwtQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ
        mnjqNBml1RU6vbRlakPNrCasFZSherijN4Rzj54BMb0cljC2ZfOnve2ZS5k27Dp9
        Yt/S30B6MQTRNZBCOCOw3jqnOW87iemxhoE713EkF+zNcWnhHRA53+be1iIhV+kE
        fyFl6/4QQmUmZo2hu6gIajmdtZvM/CgjiPdF5a6KQp4WHA339afuIMR5KQe1Qt7E
        xqaTbh7niOJEXZXSHcbT80sFam4O36rGMpjuseDbJgsIlLGSw1QwnIxWf+bFlbiD
        +2XJclAVXt+BCrsYfBXd3akLDulStW+X9SFFqX1V8+rkDdOV8lffaNhN6K4HQeBG
        ...
        LmIMzgUM9+baRYUwC552X6+szY55xqY210yjFGSqrZDyyrJMi9RhDhSL1ZqIIJDm
        kpjNMY87Qa/c2slWTjg9lE/550nBFZfQoD1zODVALCil9Tlb43wRsn8nMdD4U6Qz
        cgYfPkhRw2oUZuZwTmPOIYMrWPmmGXY4T9lZrq5afS7p+et1TKXZEZAC7akXDYL4
        CRjjXsfxmDaxy8sefg+L0nHgvESc1hWEBD2LlVVWbZCFi4MrwkkDyik5NWu6GkN2
        2xi+CJX3EBhHb1aFVDGd5dBSv3agXatsAnUMzxquuvtKbrURbMfyPCyiAZwlG9AN
        -----END CERTIFICATE-----

Once the above added, run the following to apply:

helm upgrade qliksense qlik-stable/qliksense -f values.yaml

If an UPGRADE FAILED error is returned, you may need to run helm delete qliksense --purge and do helm install -n qliksense qlik-stable/qliksense -f values.