gsh-digital-services/seaweedFS
5
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Helm use external certificates (#4913)

Browse Source
This commit is contained in:
Yuval Yacoby
2023-10-15 19:14:24 +03:00
committed by GitHub
parent cbc24c7b24
commit c6991dfd5f
8 changed files with 12 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
k8s/charts/seaweedfs/templates/ca-cert.yaml
View File

@@ -1,4 +1,4 @@
{{- if .Values.global.enableSecurity }} {{- if and .Values.global.enableSecurity (not .Values.certificates.externalCertificates.enabled)}}
apiVersion: cert-manager.io/v1{{ if .Values.global.certificates.alphacrds }}alpha1{{ end }} apiVersion: cert-manager.io/v1{{ if .Values.global.certificates.alphacrds }}alpha1{{ end }}
kind: Certificate kind: Certificate
metadata: metadata:

2
k8s/charts/seaweedfs/templates/cert-caissuer.yaml
View File

@@ -1,4 +1,4 @@
{{- if .Values.global.enableSecurity }} {{- if and .Values.global.enableSecurity (not .Values.certificates.externalCertificates.enabled)}}
apiVersion: cert-manager.io/v1{{ if .Values.global.certificates.alphacrds }}alpha1{{ end }} apiVersion: cert-manager.io/v1{{ if .Values.global.certificates.alphacrds }}alpha1{{ end }}
kind: Issuer kind: Issuer
metadata: metadata:

2
k8s/charts/seaweedfs/templates/cert-clusterissuer.yaml
View File

@@ -1,4 +1,4 @@
{{- if .Values.global.enableSecurity }} {{- if and .Values.global.enableSecurity (not .Values.certificates.externalCertificates.enabled)}}
apiVersion: cert-manager.io/v1{{ if .Values.global.certificates.alphacrds }}alpha1{{ end }} apiVersion: cert-manager.io/v1{{ if .Values.global.certificates.alphacrds }}alpha1{{ end }}
kind: ClusterIssuer kind: ClusterIssuer
metadata: metadata:

2
k8s/charts/seaweedfs/templates/client-cert.yaml
View File

@@ -1,4 +1,4 @@
{{- if .Values.global.enableSecurity }} {{- if and .Values.global.enableSecurity (not .Values.certificates.externalCertificates.enabled)}}
apiVersion: cert-manager.io/v1{{ if .Values.global.certificates.alphacrds }}alpha1{{ end }} apiVersion: cert-manager.io/v1{{ if .Values.global.certificates.alphacrds }}alpha1{{ end }}
kind: Certificate kind: Certificate
metadata: metadata:

2
k8s/charts/seaweedfs/templates/filer-cert.yaml
View File

@@ -1,4 +1,4 @@
{{- if .Values.global.enableSecurity }} {{- if and .Values.global.enableSecurity (not .Values.certificates.externalCertificates.enabled)}}
apiVersion: cert-manager.io/v1{{ if .Values.global.certificates.alphacrds }}alpha1{{ end }} apiVersion: cert-manager.io/v1{{ if .Values.global.certificates.alphacrds }}alpha1{{ end }}
kind: Certificate kind: Certificate
metadata: metadata:

2
k8s/charts/seaweedfs/templates/master-cert.yaml
View File

@@ -1,4 +1,4 @@
{{- if .Values.global.enableSecurity }} {{- if and .Values.global.enableSecurity (not .Values.certificates.externalCertificates.enabled)}}
apiVersion: cert-manager.io/v1{{ if .Values.global.certificates.alphacrds }}alpha1{{ end }} apiVersion: cert-manager.io/v1{{ if .Values.global.certificates.alphacrds }}alpha1{{ end }}
kind: Certificate kind: Certificate
metadata: metadata:

2
k8s/charts/seaweedfs/templates/volume-cert.yaml
View File

@@ -1,4 +1,4 @@
{{- if .Values.global.enableSecurity }} {{- if and .Values.global.enableSecurity (not .Values.certificates.externalCertificates.enabled)}}
apiVersion: cert-manager.io/v1{{ if .Values.global.certificates.alphacrds }}alpha1{{ end }} apiVersion: cert-manager.io/v1{{ if .Values.global.certificates.alphacrds }}alpha1{{ end }}
kind: Certificate kind: Certificate
metadata: metadata:

5
k8s/charts/seaweedfs/values.yaml
View File

@@ -640,3 +640,8 @@ certificates:
keySize: 2048 keySize: 2048
duration: 2160h # 90d duration: 2160h # 90d
renewBefore: 360h # 15d renewBefore: 360h # 15d
externalCertificates:
# This will avoid the need to use cert-manager and will rely on providing your own external certificates and CA
# you will need to store your provided certificates in the secret read by the different services:
# seaweedfs-master-cert, seaweedfs-filer-cert, etc. Can see any statefulset definition to see secret names
enabled: false