From 533bbdb33f904216d405cf27e019792b1e187983 Mon Sep 17 00:00:00 2001 From: Bartosz Gardziejewski Date: Wed, 7 Aug 2019 14:49:10 +0200 Subject: moving certificates from vid image to mounted catalog Issue-ID: VID-494 Change-Id: Ie1a3a9b362618d6b1821583bc6b3c39c28eb82c0 Signed-off-by: Bartosz Gardziejewski --- kubernetes/vid/resources/certs/org.onap.vid.jks | Bin 0 -> 3576 bytes kubernetes/vid/resources/certs/org.onap.vid.trust.jks | Bin 0 -> 1413 bytes kubernetes/vid/templates/deployment.yaml | 5 +++++ kubernetes/vid/templates/secrets.yaml | 14 ++++++++++++++ 4 files changed, 19 insertions(+) create mode 100644 kubernetes/vid/resources/certs/org.onap.vid.jks create mode 100644 kubernetes/vid/resources/certs/org.onap.vid.trust.jks (limited to 'kubernetes') diff --git a/kubernetes/vid/resources/certs/org.onap.vid.jks b/kubernetes/vid/resources/certs/org.onap.vid.jks new file mode 100644 index 0000000000..3c2ce9157d Binary files /dev/null and b/kubernetes/vid/resources/certs/org.onap.vid.jks differ diff --git a/kubernetes/vid/resources/certs/org.onap.vid.trust.jks b/kubernetes/vid/resources/certs/org.onap.vid.trust.jks new file mode 100644 index 0000000000..4caf7be652 Binary files /dev/null and b/kubernetes/vid/resources/certs/org.onap.vid.trust.jks differ diff --git a/kubernetes/vid/templates/deployment.yaml b/kubernetes/vid/templates/deployment.yaml index 8bce2cf1dc..a4e821ed78 100644 --- a/kubernetes/vid/templates/deployment.yaml +++ b/kubernetes/vid/templates/deployment.yaml @@ -109,6 +109,8 @@ spec: - name: VID_MYSQL_MAXCONNECTIONS value: "{{ .Values.config.vidmysqlmaxconnections }}" volumeMounts: + - mountPath: /opt/app/vid/etc + name: vid-certs - mountPath: /etc/localtime name: localtime readOnly: true @@ -140,6 +142,9 @@ spec: - mountPath: /usr/share/filebeat/data name: vid-data-filebeat volumes: + - name: vid-certs + secret: + secretName: {{ include "common.fullname" . }}-certs - name: localtime hostPath: path: /etc/localtime diff --git a/kubernetes/vid/templates/secrets.yaml b/kubernetes/vid/templates/secrets.yaml index 729e0b17c0..222a3d582a 100644 --- a/kubernetes/vid/templates/secrets.yaml +++ b/kubernetes/vid/templates/secrets.yaml @@ -25,3 +25,17 @@ metadata: type: Opaque data: vid-password: {{ .Values.config.vidmysqlpassword | b64enc | quote }} +--- +apiVersion: v1 +kind: Secret +metadata: + name: {{ include "common.fullname" . }}-certs + namespace: {{ include "common.namespace" . }} + labels: + app: {{ include "common.name" . }} + chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }} + release: {{ .Release.Name }} + heritage: {{ .Release.Service }} +type: Opaque +data: +{{ tpl (.Files.Glob "resources/certs/*").AsSecrets . | indent 2 }} -- cgit 1.2.3-korg