1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2025-03-30 03:15:05 +00:00

Ensure CA certificate ConfigMaps get defined (#10156)

Fixes #10141

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
This commit is contained in:
treydock 2024-05-02 03:33:13 -04:00 committed by GitHub
parent cbf121fd36
commit 87ef6f6f9b
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
5 changed files with 51 additions and 0 deletions

View file

@ -41,6 +41,8 @@ annotations:
description: Add podLabels to the post-upgrade hook
- kind: added
description: Add podLabels to the pre-delete hook
- kind: fixed
description: Ensure CA certificate config maps are created when data is provided
dependencies:
- name: grafana
version: v0.0.0

View file

@ -0,0 +1,13 @@
global:
caCertificates:
data: |
-----BEGIN CERTIFICATE-----
MIIBbzCCARWgAwIBAgIQK0Z1j0Q96/LIo4tNHxsPUDAKBggqhkjOPQQDAjAWMRQw
EgYDVQQDEwtab2xsZXJMYWJDQTAeFw0yMjA1MTgwODI2NTBaFw0zMjA1MTUwODI2
NTBaMBYxFDASBgNVBAMTC1pvbGxlckxhYkNBMFkwEwYHKoZIzj0CAQYIKoZIzj0D
AQcDQgAEJxGhyW26O77E7fqFcbzljYzlLq/G7yANNwerWnWUKlW9gcrcPqZwwrTX
yaJZpdCWTObvbOyaOxq5NsytC/ubLKNFMEMwDgYDVR0PAQH/BAQDAgEGMBIGA1Ud
EwEB/wQIMAYBAf8CAQEwHQYDVR0OBBYEFDoT1GEM8NYfxSKBkSzg4rpY+xdUMAoG
CCqGSM49BAMCA0gAMEUCIQDDLWFn/XJPqpNGXcyjlSJFxlQUJ5Cu/+nDvtbTeUGA
NAIgMsVwBafMtmLQFlfvZsE95UYoYUV4ayH+OLTTQaDQOPY=
-----END CERTIFICATE-----

View file

@ -0,0 +1,12 @@
{{- if or .Values.admissionController.caCertificates.data .Values.global.caCertificates.data }}
apiVersion: v1
kind: ConfigMap
metadata:
name: {{ include "kyverno.admission-controller.caCertificatesConfigMapName" . }}
namespace: {{ template "kyverno.namespace" . }}
labels:
{{- include "kyverno.admission-controller.labels" . | nindent 4 }}
data:
ca-certificates: |
{{ .Values.admissionController.caCertificates.data | default .Values.global.caCertificates.data | indent 4 | trim }}
{{- end -}}

View file

@ -0,0 +1,12 @@
{{- if or .Values.backgroundController.caCertificates.data .Values.global.caCertificates.data -}}
apiVersion: v1
kind: ConfigMap
metadata:
name: {{ include "kyverno.background-controller.caCertificatesConfigMapName" . }}
namespace: {{ template "kyverno.namespace" . }}
labels:
{{- include "kyverno.admission-controller.labels" . | nindent 4 }}
data:
ca-certificates: |
{{ .Values.backgroundController.caCertificates.data | default .Values.global.caCertificates.data | indent 4 | trim }}
{{- end -}}

View file

@ -0,0 +1,12 @@
{{- if or .Values.reportsController.caCertificates.data .Values.global.caCertificates.data -}}
apiVersion: v1
kind: ConfigMap
metadata:
name: {{ include "kyverno.reports-controller.caCertificatesConfigMapName" . }}
namespace: {{ template "kyverno.namespace" . }}
labels:
{{- include "kyverno.admission-controller.labels" . | nindent 4 }}
data:
ca-certificates: |
{{ .Values.reportsController.caCertificates.data | default .Values.global.caCertificates.data | indent 4 | trim }}
{{- end -}}