diff options
| author |   ChrisC <christophe.closset@intl.att.com> | 2020-09-11 18:39:23 +0200 |
|---|---|---|
| committer | ChrisC <christophe.closset@intl.att.com> | 2020-09-17 15:15:13 +0200 |
| commit | 2325efd0b6f8b094f6a801bf55d6ff6f53e9cbfa (patch) | |
| tree | ca6323d4e590c648b333cfc87122018d3e273323 /kubernetes/clamp/resources | |
| parent | 98efeea41f5617760fcc5fdb6718409b69684db9 (diff) | |
[CLAMP] AAF certificate using certinializer
use of auto-generated certificates via AAF side-car
at OOM deployment time for CLAMP.
Issue-ID: CLAMP-884
Change-Id: I24f5a119714a5e46c4d0c152c03b6bc545135b8e
Signed-off-by: osgn422w <gervais-martial.ngueko@intl.att.com>
Signed-off-by: ChrisC <christophe.closset@intl.att.com>
Diffstat (limited to 'kubernetes/clamp/resources')
| -rw-r--r-- | kubernetes/clamp/resources/config/default.conf | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/kubernetes/clamp/resources/config/default.conf b/kubernetes/clamp/resources/config/default.conf index 84beff8d5a..3e6fde9d0d 100644 --- a/kubernetes/clamp/resources/config/default.conf +++ b/kubernetes/clamp/resources/config/default.conf @@ -2,8 +2,14 @@ server { listen 2443 default ssl; ssl_protocols TLSv1.2; + {{ if .Values.global.aafEnabled }} + ssl_certificate {{.Values.certInitializer.credsPath}}/{{.Values.certInitializer.clamp_pem}}; + ssl_certificate_key {{.Values.certInitializer.credsPath}}/{{.Values.certInitializer.clamp_key}}; + {{ else }} ssl_certificate /etc/ssl/clamp.pem; ssl_certificate_key /etc/ssl/clamp.key; + {{ end }} + ssl_verify_client optional_no_ca; location /restservices/clds/ { proxy_pass https://clamp-backend:443; |