Changed RabbitMQ TLS secret type to kubernetes.io/tls. Can use cert-manager created secrets with this chart now. (#20907)

Signed-off-by: Charalampos Kaidos <ckaidos@intracom-telecom.com>
This commit is contained in:
Babis K
2020-02-27 02:21:20 -08:00
committed by GitHub
parent 21e6faa52e
commit 28993e1abb
4 changed files with 9 additions and 9 deletions
+1 -1
View File
@@ -1,6 +1,6 @@
apiVersion: v1
name: rabbitmq
version: 6.18.0
version: 6.18.1
appVersion: 3.8.2
description: Open source message broker software that implements the Advanced Message Queuing Protocol (AMQP)
keywords:
+1 -1
View File
@@ -342,7 +342,7 @@ You must include in your values.yaml the caCertificate, serverCertificate and se
-----END RSA PRIVATE KEY-----
```
This will be generate a secret with the certs, but is possible specify an existing secret using `existingSecret: name-of-existing-secret-to-rabbitmq`
This will be generate a secret with the certs, but is possible specify an existing secret using `existingSecret: name-of-existing-secret-to-rabbitmq`. The secret is of type `kubernetes.io/tls`.
Disabling [failIfNoPeerCert](https://www.rabbitmq.com/ssl.html#peer-verification-configuration) allows a TLS connection if client fails to provide a certificate
+4 -4
View File
@@ -8,12 +8,12 @@ metadata:
chart: {{ template "rabbitmq.chart" . }}
release: "{{ .Release.Name }}"
heritage: "{{ .Release.Service }}"
type: Opaque
type: kubernetes.io/tls
data:
ca_certificate.pem:
ca.crt:
{{ required "A valid .Values.rabbitmq.tls.caCertificate entry required!" .Values.rabbitmq.tls.caCertificate | b64enc | quote }}
server_certificate.pem:
tls.crt:
{{ required "A valid .Values.rabbitmq.tls.serverCertificate entry required!" .Values.rabbitmq.tls.serverCertificate| b64enc | quote }}
server_key.pem:
tls.key:
{{ required "A valid .Values.rabbitmq.tls.serverKey entry required!" .Values.rabbitmq.tls.serverKey | b64enc | quote }}
{{- end }}
+3 -3
View File
@@ -311,11 +311,11 @@ spec:
secret:
secretName: {{ if .Values.rabbitmq.tls.existingSecret }}{{ .Values.rabbitmq.tls.existingSecret }}{{- else }}{{ template "rabbitmq.fullname" . }}-certs{{- end }}
items:
- key: ca_certificate.pem
- key: ca.crt
path: ca_certificate.pem
- key: server_certificate.pem
- key: tls.crt
path: server_certificate.pem
- key: server_key.pem
- key: tls.key
path: server_key.pem
{{- end }}
- name: config-volume