mirrors/kyverno
mirrors/kyverno
1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2025-03-31 03:45:17 +00:00
Code Activity

fix: helm self signed cert ()

Browse source 
* fix: helm self signed cert

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

* release note

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
This commit is contained in:
Charles-Edouard Brétéché 2022-09-29 22:18:39 +02:00 • committed by GitHub
parent 528bcbad6b
commit a986a98535
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 4 additions and 1 deletions
charts/kyverno
Chart.yaml
templates
secret.yaml

2
charts/kyverno/Chart.yaml
View file

@ -36,3 +36,5 @@ annotations:
description: Docs for generatecontrollerExtraResources.
- kind: changed
description: Enable autogen internals by default.
- kind: fixed
description: Self signed certificates not using SANs.

3
charts/kyverno/templates/secret.yaml
View file

@ -1,6 +1,7 @@
{{- if .Values.createSelfSignedCert }}
{{- $ca := genCA (printf "*.%s.svc" (include "kyverno.namespace" .)) 1024 -}}
{{- $cert := genSignedCert (printf "%s.%s.svc" (include "kyverno.serviceName" .) (include "kyverno.namespace" .)) nil nil 1024 $ca -}}
{{- $svcName := (printf "%s.%s.svc" (include "kyverno.serviceName" .) (include "kyverno.namespace" .)) -}}
{{- $cert := genSignedCert $svcName nil (list $svcName) 1024 $ca -}}
apiVersion: v1
kind: Secret
metadata: