32 lines
1.2 KiB
YAML
32 lines
1.2 KiB
YAML
{{- $tls := .Values.security.tls -}}
|
|
{{- $restTls := .Values.apis.rest.security.tls -}}
|
|
{{- $mutualAuth := dig "mutualAuth" $tls.mutualAuth $restTls -}}
|
|
{{- if and $tls.enabled $tls.autoGenerated.enabled $mutualAuth (eq $tls.autoGenerated.engine "cert-manager") }}
|
|
---
|
|
apiVersion: cert-manager.io/v1
|
|
kind: Certificate
|
|
metadata:
|
|
name: {{ include "rest_api_tls_csi_controller_client_secret_name" . }}
|
|
namespace: {{ .Release.Namespace }}
|
|
labels:
|
|
app: csi-controller
|
|
{{ include "label_prefix" . }}/release: {{ .Release.Name }}
|
|
{{ include "label_prefix" . }}/version: {{ .Chart.Version }}
|
|
spec:
|
|
secretName: {{ include "rest_api_tls_csi_controller_client_secret_name" . }}
|
|
commonName: {{ printf "%s-api-rest-csi-controller" .Release.Name }}
|
|
issuerRef:
|
|
name: {{ printf "%s-tls-ca-issuer" .Release.Name }}
|
|
kind: Issuer
|
|
subject:
|
|
organizations:
|
|
- "OpenEBS"
|
|
usages:
|
|
- client auth
|
|
privateKey:
|
|
algorithm: {{ $tls.autoGenerated.certManager.keyAlgorithm }}
|
|
size: {{ int $tls.autoGenerated.certManager.keySize }}
|
|
duration: {{ $tls.autoGenerated.certManager.duration }}
|
|
renewBefore: {{ $tls.autoGenerated.certManager.renewBefore }}
|
|
{{- end -}}
|