From ea40ddc98635c1fc9c66f73800a84f742332bf05 Mon Sep 17 00:00:00 2001 From: Nisan Itzhakov Date: Thu, 3 Jan 2019 19:38:20 +0200 Subject: [PATCH] charts/stable/kiam: define tls secret name instead of tlsFiles (#10353) * charts/stable/kiam: define tls secret name instead of tlsFiles Signed-off-by: Nisan Itzhakov * charts/stable/kiam: updated the certificates at tlsFiles Signed-off-by: Nisan Itzhakov --- stable/kiam/Chart.yaml | 2 +- stable/kiam/README.md | 12 ++++++++++++ stable/kiam/ci/test-values.yaml | 12 ++++++------ stable/kiam/templates/agent-daemonset.yaml | 4 ++++ stable/kiam/templates/agent-secret.yaml | 2 +- stable/kiam/templates/server-daemonset.yaml | 4 ++++ stable/kiam/templates/server-secret.yaml | 2 +- stable/kiam/values.yaml | 8 ++++++++ 8 files changed, 37 insertions(+), 9 deletions(-) diff --git a/stable/kiam/Chart.yaml b/stable/kiam/Chart.yaml index a4263f34e5..01f08b3954 100644 --- a/stable/kiam/Chart.yaml +++ b/stable/kiam/Chart.yaml @@ -1,5 +1,5 @@ name: kiam -version: 2.0.0-rc3 +version: 2.0.1-rc3 appVersion: 3.0-rc1 description: Integrate AWS IAM with Kubernetes keywords: diff --git a/stable/kiam/README.md b/stable/kiam/README.md index e6d7e916a4..0ebddccc4e 100644 --- a/stable/kiam/README.md +++ b/stable/kiam/README.md @@ -43,6 +43,16 @@ server: ca: LS0tL... ``` +Define secret name values `agent.tlsSecret` and `server.tlsSecret` if TLS certificates secrets have already created instead of `tlsFiles`. + +```yaml +agent: + tlsSecret: kiam-agent-tls + +server: + tlsSecret: kiam-server-tls +``` + To install the chart with the release name `my-release`: ```console @@ -90,6 +100,7 @@ Parameter | Description | Default `agent.podAnnotations` | Annotations to be added to agent pods | `{}` `agent.podLabels` | Labels to be added to agent pods | `{}` `agent.resources` | Agent container resources | `{}` +`agent.tlsSecret` | Secret name for the agent's TLS certificates | `null` `agent.tlsFiles.ca` | Base64 encoded string for the agent's CA certificate(s) | `null` `agent.tlsFiles.cert` | Base64 encoded strings for the agent's certificate | `null` `agent.tlsFiles.key` | Base64 encoded strings for the agent's private key | `null` @@ -120,6 +131,7 @@ Parameter | Description | Default `server.sessionDuration` | Session duration for STS tokens generated by the server | `15m` `server.service.port` | Server service port | `443` `server.service.targetPort` | Server service target port | `443` +`server.tlsSecret` | Secret name for the server's TLS certificates | `null` `server.tlsFiles.ca` | Base64 encoded string for the server's CA certificate(s) | `null` `server.tlsFiles.cert` | Base64 encoded strings for the server's certificate | `null` `server.tlsFiles.key` | Base64 encoded strings for the server's private key | `null` diff --git a/stable/kiam/ci/test-values.yaml b/stable/kiam/ci/test-values.yaml index 0f978a7758..5a35cf559d 100644 --- a/stable/kiam/ci/test-values.yaml +++ b/stable/kiam/ci/test-values.yaml @@ -3,15 +3,15 @@ agent: gatewayTimeoutCreation: 60s tlsFiles: # Base64-encoded PEMs. - key: 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 - cert: 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 - ca: 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 + key: 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 + cert: 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 + ca: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSURxRENDQXBDZ0F3SUJBZ0lVRkwwZHRPSE55d0pmaWFoTG54M0psZzd1MjBZd0RRWUpLb1pJaHZjTkFRRUwKQlFBd2JERU1NQW9HQTFVRUJoTURWVk5CTVFzd0NRWURWUVFJRXdKRFFURVVNQklHQTFVRUJ4TUxURzl6SUVGdQpaMlZzWlhNeEdUQVhCZ05WQkFvVEVFTnNiM1ZrSUZCdmMzTmxMQ0JNVEVNeEREQUtCZ05WQkFzVEEwOXdjekVRCk1BNEdBMVVFQXhNSFMybGhiU0JEUVRBZUZ3MHhPVEF4TURJd09UVTRNREJhRncweU5EQXhNREV3T1RVNE1EQmEKTUd3eEREQUtCZ05WQkFZVEExVlRRVEVMTUFrR0ExVUVDQk1DUTBFeEZEQVNCZ05WQkFjVEMweHZjeUJCYm1kbApiR1Z6TVJrd0Z3WURWUVFLRXhCRGJHOTFaQ0JRYjNOelpTd2dURXhETVF3d0NnWURWUVFMRXdOUGNITXhFREFPCkJnTlZCQU1UQjB0cFlXMGdRMEV3Z2dFaU1BMEdDU3FHU0liM0RRRUJBUVVBQTRJQkR3QXdnZ0VLQW9JQkFRQ3QKODhMV1VOT3lHcDUxMVJYWlpXaVJzcVJkUmdUOStZUXQzN21lcCtOWndlcFFQUmNkblh1anYwYnV6RUdpK0k4SApSL1B6TzRUdytGeXN1KzJaRElRTG9aWE10YkdGZ0FFSVc1YUtVOHZRMTF6Y2dhMmYyQnJXRzNVai8zK3pWOWUvCmlaT3JlS1hmZFAzRnV4bDc3TllPY20xOVU5Nnk4TGNDOEduK29DZmJVcThOcHZVMDNmZGRjTC9qTy9ZTlJETGgKVy9zR1JmVnlNd0tVVjRjaUtNQ3hjQ0JxZWNZbmkyVTYweEF2QyswSFZwR3VnSmliWWpBZXZuaUM3NjVOa1pmMwpFWFRVSkJGT284WFBZdWgweThuYWRMT0RWMzB0bWZVRHlxaWMramJzU1FaREZQNVNJNGVLLzNEM21ldHZzd1loCkcvRUtJTUh0V0ZpZHBSRWMzYis3QWdNQkFBR2pRakJBTUE0R0ExVWREd0VCL3dRRUF3SUJCakFQQmdOVkhSTUIKQWY4RUJUQURBUUgvTUIwR0ExVWREZ1FXQkJRSzlmTFNLNjA3aXBqaHYrTXlsM3QvTk5oY3JEQU5CZ2txaGtpRwo5dzBCQVFzRkFBT0NBUUVBRCsyNERKSEhZWlRibTlFRW93UFA4Sk5LdWMwYkQ0cC8rNms0RExDajRJTWtLRFpqClgwWHZlQWkvTm9sQWZVTkFBQi9WTnRLMTB0ZFZVSGhhZW8zRFQ4OFRKaEQra3VJOGdhbHlDZlhnSnVrdytRMHQKWEp2WS8vZ1NQT0xuQ3NMSTIrQUlYNlJ6SUwyODNzaDRIY2FBaE81YnRCc1Q0U3lqN2t6UGFuTGdQOVpVYTFoZQpxVUpjNms0Q1FzUFA2YmtZanQ4QktFaE5XVmJ6aXpOcyszSFFaMzVHeDRka1VLd1ZnVklWTGU2bmtJV1RJeHVJCmloRkNmWjJTRWphS0Uwdi9tM0p5RjhJTzVJQTBQTFFiMUw4Y1NyM2R4cUszank3cGVxY1ZRbmhGZzNIMkdHWEsKeFVlUlZjYm44WEFyV0NCWUJiM0JyZjZ2V082RFM3L1VjWnV3UkE9PQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg== server: gatewayTimeoutCreation: 60s roleBaseArn: "arn:aws:iam::0123456789:role/" tlsFiles: # Base64-encoded PEMs. - key: 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 - cert: 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 - ca: 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 + key: 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 + cert: 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 + ca: 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 diff --git a/stable/kiam/templates/agent-daemonset.yaml b/stable/kiam/templates/agent-daemonset.yaml index d2fbf74b4b..94030998aa 100644 --- a/stable/kiam/templates/agent-daemonset.yaml +++ b/stable/kiam/templates/agent-daemonset.yaml @@ -44,7 +44,11 @@ spec: volumes: - name: tls secret: + {{- if .Values.agent.tlsSecret }} + secretName: {{ .Values.agent.tlsSecret }} + {{else}} secretName: {{ template "kiam.fullname" . }}-agent + {{- end }} - name: xtables hostPath: path: /run/xtables.lock diff --git a/stable/kiam/templates/agent-secret.yaml b/stable/kiam/templates/agent-secret.yaml index a0515ac8bb..8407514ad3 100644 --- a/stable/kiam/templates/agent-secret.yaml +++ b/stable/kiam/templates/agent-secret.yaml @@ -1,4 +1,4 @@ -{{- if .Values.agent.enabled -}} +{{- if and (.Values.agent.enabled) (not .Values.agent.tlsSecret) -}} kind: Secret apiVersion: v1 metadata: diff --git a/stable/kiam/templates/server-daemonset.yaml b/stable/kiam/templates/server-daemonset.yaml index 75abbc97dd..c5d4254f4a 100644 --- a/stable/kiam/templates/server-daemonset.yaml +++ b/stable/kiam/templates/server-daemonset.yaml @@ -40,7 +40,11 @@ spec: volumes: - name: tls secret: + {{- if .Values.server.tlsSecret }} + secretName: {{ .Values.server.tlsSecret }} + {{else}} secretName: {{ template "kiam.fullname" . }}-server + {{- end }} {{- range .Values.server.extraHostPathMounts }} - name: {{ .name }} hostPath: diff --git a/stable/kiam/templates/server-secret.yaml b/stable/kiam/templates/server-secret.yaml index b7dc917cf1..6884e21ae2 100644 --- a/stable/kiam/templates/server-secret.yaml +++ b/stable/kiam/templates/server-secret.yaml @@ -1,4 +1,4 @@ -{{- if .Values.server.enabled -}} +{{- if and (.Values.server.enabled) (not .Values.server.tlsSecret) -}} kind: Secret apiVersion: v1 metadata: diff --git a/stable/kiam/values.yaml b/stable/kiam/values.yaml index b8be5a3fb2..4e5f5e8900 100644 --- a/stable/kiam/values.yaml +++ b/stable/kiam/values.yaml @@ -87,6 +87,10 @@ agent: cert: key: + ## Secret name of agent's TLS certificates + ## + tlsSecret: + server: ## If false, server will not be installed ## @@ -169,6 +173,10 @@ server: cert: key: + ## Secret name of server's TLS certificates + ## + tlsSecret: + ## Base ARN for IAM roles ## If not specified use EC2 metadata service to detect ARN prefix ##