From bb0beb1cae6016e217beec9becb1c2ff500a0dc3 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Ra=C3=BAl=20Garcia=20Sanchez?= Date: Wed, 4 Mar 2020 10:35:46 +0100 Subject: [PATCH] [stable/cerebro] Add ability to set tls skip verify via vaules file (#21178) * Update Chart.yaml Signed-off-by: Raul Garcia * Add ability skip tls verification Signed-off-by: Raul Garcia * Update configmap.yaml fixed mixed behavior Signed-off-by: Raul Garcia * Update stable/cerebro/Chart.yaml Signed-off-by: David Karlsen Co-authored-by: David J. M. Karlsen --- stable/cerebro/Chart.yaml | 2 +- stable/cerebro/README.md | 1 + stable/cerebro/templates/configmap.yaml | 6 ++++++ stable/cerebro/values.yaml | 1 + 4 files changed, 9 insertions(+), 1 deletion(-) diff --git a/stable/cerebro/Chart.yaml b/stable/cerebro/Chart.yaml index 441a545646..527689248d 100644 --- a/stable/cerebro/Chart.yaml +++ b/stable/cerebro/Chart.yaml @@ -1,5 +1,5 @@ name: cerebro -version: 1.4.0 +version: 1.5.0 appVersion: 0.8.5 apiVersion: v1 description: A Helm chart for Cerebro - a web admin tool that replaces Kopf. diff --git a/stable/cerebro/README.md b/stable/cerebro/README.md index b85dd458c7..8ba4fb5f10 100644 --- a/stable/cerebro/README.md +++ b/stable/cerebro/README.md @@ -69,6 +69,7 @@ The following table lists the configurable parameters of the cerebro chart and t | `config.restHistorySize` | Rest request history size per user | `50` | | `config.hosts` | A list of known hosts | `[]` | | `config.secret` | Secret used to sign session cookies | `(random alphanumeric 64 length string)` | +| `config.tlsVerify` | Validate Elasticsearch cert | `true` | | `securityContext` | Security context for pod | `See values.yaml` | diff --git a/stable/cerebro/templates/configmap.yaml b/stable/cerebro/templates/configmap.yaml index 9a67f8dc30..0abbd6dc4c 100644 --- a/stable/cerebro/templates/configmap.yaml +++ b/stable/cerebro/templates/configmap.yaml @@ -15,6 +15,12 @@ data: secret = {{ randAlphaNum 64 | quote }} {{- end }} + {{- if .Values.config.tlsVerify }} + play.ws.ssl.loose.acceptAnyCertificate = false + {{- else }} + play.ws.ssl.loose.acceptAnyCertificate = true + {{- end }} + basePath = {{ .Values.config.basePath | quote }} pidfile.path = /dev/null diff --git a/stable/cerebro/values.yaml b/stable/cerebro/values.yaml index c34aac4ec5..0752d5d677 100644 --- a/stable/cerebro/values.yaml +++ b/stable/cerebro/values.yaml @@ -62,3 +62,4 @@ config: # Secret used to sign session cookies. If empty it will be replaced with a # random 64 length string secret: '' + tlsVerify: true