SSL support - Disable value from secret when secret is mounted (#7693)

Signed-off-by: Karol Chrapek <kchrapek@novomatic-tech.com>
This commit is contained in:
Karol Chrapek
2018-09-12 06:58:48 -07:00
committed by k8s-ci-robot
parent 14fd780d45
commit 95978784b6
3 changed files with 5 additions and 3 deletions
+1 -1
View File
@@ -2,7 +2,7 @@ apiVersion: v1
description: Apache Kafka is publish-subscribe messaging rethought as a distributed
commit log.
name: kafka
version: 0.9.5
version: 0.9.6
appVersion: 4.1.2
keywords:
- kafka
+1 -1
View File
@@ -81,7 +81,7 @@ following configurable parameters:
| `podAnnotations` | Annotation to be added to Kafka pods | `{}` |
| `rbac.enabled` | Enable a service account and role for the init container to use in an RBAC enabled cluster | `false` |
| `configurationOverrides` | `Kafka ` [configuration setting][brokerconfigs] overrides in the dictionary format | `{ offsets.topic.replication.factor: 3 }` |
| `secrets` | `{}` | Pass any secrets to the kafka pods. Each secret will be passed as an environment variable by default. The secret can also be mounted to a specific path (in addition to environment variable) if required. Environment variable names are generated as: `<secretName>_<secretKey>` (All upper case)|
| `secrets` | `{}` | Pass any secrets to the kafka pods. Each secret will be passed as an environment variable by default. The secret can also be mounted to a specific path if required. Environment variable names are generated as: `<secretName>_<secretKey>` (All upper case)|
| `additionalPorts` | Additional ports to expose on brokers. Useful when the image exposes metrics (like prometheus, etc.) through a javaagent instead of a sidecar | `{}` |
| `readinessProbe.initialDelaySeconds` | Number of seconds before probe is initiated. | `30` |
| `readinessProbe.periodSeconds` | How often (in seconds) to perform the probe. | `10` |
+3 -1
View File
@@ -177,12 +177,14 @@ spec:
value: "{{ .Values.jmx.port }}"
{{- end }}
{{- range $secret := .Values.secrets }}
{{- range $key := $secret.keys }}
{{- if not $secret.mountPath }}
{{- range $key := $secret.keys }}
- name: {{ (print $secret.name "_" $key) | upper }}
valueFrom:
secretKeyRef:
name: {{ $secret.name }}
key: {{ $key }}
{{- end }}
{{- end }}
{{- end }}
# This is required because the Downward API does not yet support identification of