[stable/cerebro] Add ability to set tls skip verify via vaules file (#21178)

* Update Chart.yaml

Signed-off-by: Raul Garcia <garcia@denic.de>

* Add ability skip tls verification

Signed-off-by: Raul Garcia <garcia@denic.de>

* Update configmap.yaml

fixed mixed behavior

Signed-off-by: Raul Garcia <garcia@denic.de>

* Update stable/cerebro/Chart.yaml

Signed-off-by: David Karlsen <david@davidkarlsen.com>

Co-authored-by: David J. M. Karlsen <david@davidkarlsen.com>

stable/cerebro/Chart.yaml

@@ -1,5 +1,5 @@
 name: cerebro
-version: 1.4.0
+version: 1.5.0
 appVersion: 0.8.5
 apiVersion: v1
 description: A Helm chart for Cerebro - a web admin tool that replaces Kopf.

stable/cerebro/README.md

@@ -69,6 +69,7 @@ The following table lists the configurable parameters of the cerebro chart and t
 | `config.restHistorySize`            | Rest request history size per user  | `50`                                      |
 | `config.hosts`                      | A list of known hosts               | `[]`                                      |
 | `config.secret`                     | Secret used to sign session cookies | `(random alphanumeric 64 length string)`  |
+| `config.tlsVerify`                  | Validate Elasticsearch cert         | `true`                                    |
 | `securityContext`                   | Security context for pod            | `See values.yaml`                         |
 
 

stable/cerebro/templates/configmap.yaml

@@ -15,6 +15,12 @@ data:
     secret = {{ randAlphaNum 64 | quote }}
     {{- end }}
 
+    {{- if .Values.config.tlsVerify }}
+    play.ws.ssl.loose.acceptAnyCertificate = false
+    {{- else }}
+    play.ws.ssl.loose.acceptAnyCertificate = true
+    {{- end }}
+
     basePath = {{ .Values.config.basePath | quote }}
 
     pidfile.path = /dev/null

stable/cerebro/values.yaml

@@ -62,3 +62,4 @@ config:
   # Secret used to sign session cookies. If empty it will be replaced with a
   # random 64 length string
   secret: ''
+  tlsVerify: true