fix: Inject ca-bundle into gitea container

2023-08-25 14:13:01 +02:00
parent b2ae56e54b
commit 90082ca36a
2 changed files with 17 additions and 0 deletions
--- a/ansible/vars/metacluster.yml
+++ b/ansible/vars/metacluster.yml
@ -135,6 +135,16 @@ components:
      chart: gitea-charts/gitea
      parse_logic: helm template . | yq --no-doc eval '.. | .image? | select(.)' | sort -u | sed '/:/!s/$/:latest/'
      chart_values: !unsafe |
+        extraVolumes:
+          - secret:
+              defaultMode: 420
+              name: step-certificates-certs
+            name: step-certificates-certs
+        extraVolumeMounts:
+          - mountPath: /etc/ssl/certs/ca-chain.crt
+            name: step-certificates-certs
+            readOnly: true
+            subPath: ca_chain.crt
        gitea:
          admin:
            username: administrator