Add TLS volume mount for RDS (#277)

* Add TLS volume mount for RDS * Fix volume name * Mount as pem
project-kessel · Nov 19, 2024 · 2b09d4e · 2b09d4e
1 parent edb2639
commit 2b09d4e
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/deploy/kessel-relations-deploy.yaml b/deploy/kessel-relations-deploy.yaml
@@ -19,8 +19,16 @@ objects:
           spec:
             template:
               spec:
+                volumes:
+                - name: rds-tls
+                  secret:
+                    secretName: kessel-relations-spicedb
                 containers:
                 - name: spicedb
+                  volumeMounts:
+                  - name: rds-tls
+                    mountPath: /etc/tls/rds.pem
+                    subPath: db.ca_cert
                   resources:
                     requests:
                       memory: ${SPICEDB_REQUESTS_MEMORY}