Store certificate in configmap/secret dynamically;Remove helmchart values
All checks were successful
continuous-integration/drone/push Build is passing

This commit is contained in:
2022-08-30 21:14:51 +02:00
parent d8299ee90c
commit 8d13b527be
4 changed files with 59 additions and 39 deletions

View File

@ -149,26 +149,26 @@ components:
configs:
secret:
argocdServerAdminPassword: "{{ vapp['guestinfo.rootpw'] | password_hash('bcrypt') }}"
controller:
volumeMounts:
- name: custom-ca-certificates
mountPath: /etc/ssl/certs/custom-ca-certificates.crt
subPath: custom-ca-certificates.crt
volumes:
- name: custom-ca-certificates
secret:
defaultMode: 420
secretName: step-certificates-certs
repoServer:
volumeMounts:
- name: custom-ca-certificates
mountPath: /etc/ssl/certs/custom-ca-certificates.crt
subPath: custom-ca-certificates.crt
volumes:
- name: custom-ca-certificates
secret:
defaultMode: 420
secretName: step-certificates-certs
# controller:
# volumeMounts:
# - name: custom-ca-certificates
# mountPath: /etc/ssl/certs/custom-ca-certificates.crt
# subPath: custom-ca-certificates.crt
# volumes:
# - name: custom-ca-certificates
# secret:
# defaultMode: 420
# secretName: step-certificates-certs
# repoServer:
# volumeMounts:
# - name: custom-ca-certificates
# mountPath: /etc/ssl/certs/custom-ca-certificates.crt
# subPath: custom-ca-certificates.crt
# volumes:
# - name: custom-ca-certificates
# secret:
# defaultMode: 420
# secretName: step-certificates-certs
server:
extraArgs:
- --insecure
@ -176,15 +176,15 @@ components:
enabled: true
hosts:
- gitops.{{ vapp['metacluster.fqdn'] }}
volumeMounts:
- name: custom-ca-certificates
mountPath: /etc/ssl/certs/custom-ca-certificates.crt
subPath: custom-ca-certificates.crt
volumes:
- name: custom-ca-certificates
secret:
defaultMode: 420
secretName: step-certificates-certs
# volumeMounts:
# - name: custom-ca-certificates
# mountPath: /etc/ssl/certs/custom-ca-certificates.crt
# subPath: custom-ca-certificates.crt
# volumes:
# - name: custom-ca-certificates
# secret:
# defaultMode: 420
# secretName: step-certificates-certs
sealed-secrets:
helm: