ivampiresp/longhorn
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add optional mtls secret mount for manager

Browse Source 
The MTLS secret is currently hardcoded to longhorn-grpc-tls we can improve
this further in the future when necessary to also enable auto cert generation

Longhorn #3839

Signed-off-by: Joshua Moody <joshua.moody@suse.com>
This commit is contained in:
Joshua Moody 2022-05-06 04:56:56 +02:00 committed by David Ko
parent 4e5a8338b7
commit f28692e0ce
2 changed files with 12 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
chart/templates/daemonset-sa.yaml
View File

@ -58,6 +58,8 @@ spec:
- name: longhorn - name: longhorn
mountPath: /var/lib/longhorn/ mountPath: /var/lib/longhorn/
mountPropagation: Bidirectional mountPropagation: Bidirectional
- name: longhorn-grpc-tls
mountPath: /tls-files/
- name: longhorn-default-setting - name: longhorn-default-setting
mountPath: /var/lib/longhorn-setting/ mountPath: /var/lib/longhorn-setting/
env: env:
@ -85,6 +87,10 @@ spec:
- name: longhorn - name: longhorn
hostPath: hostPath:
path: /var/lib/longhorn/ path: /var/lib/longhorn/
- name: longhorn-grpc-tls
secret:
secretName: longhorn-grpc-tls
optional: true
- name: longhorn-default-setting - name: longhorn-default-setting
configMap: configMap:
name: longhorn-default-setting name: longhorn-default-setting

6
deploy/longhorn.yaml
View File

@ -3375,6 +3375,8 @@ spec:
- name: longhorn - name: longhorn
mountPath: /var/lib/longhorn/ mountPath: /var/lib/longhorn/
mountPropagation: Bidirectional mountPropagation: Bidirectional
- name: longhorn-grpc-tls
mountPath: /tls-files/
- name: longhorn-default-setting - name: longhorn-default-setting
mountPath: /var/lib/longhorn-setting/ mountPath: /var/lib/longhorn-setting/
env: env:
@ -3402,6 +3404,10 @@ spec:
- name: longhorn - name: longhorn
hostPath: hostPath:
path: /var/lib/longhorn/ path: /var/lib/longhorn/
- name: longhorn-grpc-tls
secret:
secretName: longhorn-grpc-tls
optional: true
- name: longhorn-default-setting - name: longhorn-default-setting
configMap: configMap:
name: longhorn-default-setting name: longhorn-default-setting