Allow specifying custom Certificate Authority as a ConfigMap name (#209)

replicatedhq · Sep 20, 2024 · 5dea5a3 · 5dea5a3
1 parent 8d0fa11
commit 5dea5a3
Show file tree

Hide file tree

Showing 2 changed files with 16 additions and 0 deletions.
diff --git a/chart/templates/replicated-deployment.yaml b/chart/templates/replicated-deployment.yaml
@@ -48,6 +48,12 @@ spec:
       - name: replicated
         secret:
           secretName: {{ include "replicated.secretName" . }}
+      {{- if .Values.privateCAConfigmap }}
+      - name: additional-certs
+        configMap:
+          defaultMode: 420
+          name: {{ .Values.privateCAConfigmap }}
+      {{- end }}
       containers:
       - name: replicated
         image: {{ index .Values.images "replicated-sdk" }}
@@ -60,10 +66,18 @@ spec:
           mountPath: /etc/replicated/config.yaml
           readOnly: true
           subPath: config.yaml
+        {{- if .Values.privateCAConfigmap }}
+        - mountPath: /certs
+          name: additional-certs
+        {{- end }}
         env:
         {{- with .Values.extraEnv }}
         {{- toYaml . | nindent 8 }}
         {{- end }}
+        {{- if .Values.privateCAConfigmap }}
+        - name: SSL_CERT_DIR
+          value: /certs
+        {{- end }}
         - name: REPLICATED_NAMESPACE
           valueFrom:
             fieldRef:

diff --git a/chart/values.yaml.tmpl b/chart/values.yaml.tmpl
@@ -45,6 +45,8 @@ service:
   type: ClusterIP
   port: 3000
 
+privateCAConfigmap: ~
+
 extraEnv: []
 
 # "integration" mode related values.