Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

helm chart: DKIM #83

Closed
zerthimon opened this issue Aug 19, 2021 · 3 comments
Closed

helm chart: DKIM #83

zerthimon opened this issue Aug 19, 2021 · 3 comments

Comments

@zerthimon
Copy link

Is it possible to install the chart with pre-generated DKIM keys ?
Has anyone done that and can share their values.yaml file ?

@zerthimon
Copy link
Author

I figured out how to add DKIM without changing the helm chart:
Here are my values

config:
  general:
    ALLOWED_SENDER_DOMAINS: foo.bar

secret:
  dkim-private: |
    -----BEGIN RSA PRIVATE KEY-----
    < redacted >
    -----END RSA PRIVATE KEY-----

persistence:
  enabled: false

extraVolumes:
  - name: dkim-private
    secret:
      secretName: mail
      items:
        - key: dkim-private
          path: foo.bar.private

extraVolumeMounts:
  - name: dkim-private
    mountPath: /etc/opendkim/keys
    readOnly: true

It works, but there are two minor issues:

  1. The private keys ends up in the container env (since the envFrom:secretRef)
  2. secretName in extraVolumes needs to be set to the release name.

@zerthimon
Copy link
Author

zerthimon commented Aug 19, 2021

It'd be nice to have a specific values parameter for the DKIM private key setting for easy addition of the DKIM volume.

@zerthimon zerthimon changed the title DKIM and helm chart helm chart: DKIM Aug 19, 2021
@bokysan
Copy link
Owner

bokysan commented Aug 22, 2021

I've added a new feature to the latest helm chart -- mountSecret, which should help you with this issue.

@bokysan bokysan closed this as completed Aug 22, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants