@Eaugene Thomas, this should be straight forward. Add your (self-signed) CA cert to the trust store, and your private keys to the key store.
I see you already found the docs - generate e.g. one JKS file for the truststore and another for the keystore. Then, point your pinot components to those files via the
tls.*
configs