From 88cf4965828fa7f17e413a4465844e200d1358df Mon Sep 17 00:00:00 2001 From: Huabing Zhao Date: Thu, 14 May 2020 09:17:52 +0800 Subject: Set certificate SAN as msb-iag MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Also add helm certificate to be used within deployments. Issue-ID: MSB-467 Signed-off-by: Huabing Zhao Signed-off-by: Konrad Bańka Change-Id: I1dabc31275edebd4a01be658e462a7d45497ce46 --- kubernetes/msb/charts/msb-iag/templates/deployment.yaml | 11 +++++++++++ 1 file changed, 11 insertions(+) (limited to 'kubernetes/msb/charts/msb-iag/templates') diff --git a/kubernetes/msb/charts/msb-iag/templates/deployment.yaml b/kubernetes/msb/charts/msb-iag/templates/deployment.yaml index 8975a32c7f..f95f1059a6 100644 --- a/kubernetes/msb/charts/msb-iag/templates/deployment.yaml +++ b/kubernetes/msb/charts/msb-iag/templates/deployment.yaml @@ -81,6 +81,14 @@ spec: - mountPath: /etc/localtime name: localtime readOnly: true + - name: {{ include "common.fullname" . }}-cert + mountPath: /usr/local/openresty/nginx/ssl/cert/cert.crt + readOnly: true + subPath: "cert.crt" + - name: {{ include "common.fullname" . }}-cert + mountPath: /usr/local/openresty/nginx/html/cert/ca.crt + readOnly: true + subPath: "ca.crt" - mountPath: /usr/local/apiroute-works/logs name: {{ include "common.fullname" . }}-logs resources: @@ -109,6 +117,9 @@ spec: name: {{ include "common.fullname" . }}-log-conf subPath: logback.xml volumes: + - name: {{ include "common.fullname" . }}-cert + secret: + secretName: {{ include "common.release" . }}-msb-https-cert - name: {{ include "common.fullname" . }}-log-conf configMap: name: {{ include "common.fullname" . }}-log -- cgit 1.2.3-korg