Skip to content

Conversation

@oliverisaac
Copy link

This PR allows adding arbitrary values to the statefulset's pod spec. (As well as the init job.) This is needed to allow setting shareProcessNamespace: true to the pod spec to accommodate Hashicorp Vault injected dynamic certificates.

@udnay
Copy link

udnay commented Nov 25, 2021

Can you please add some tests for this feature and then we can take a look a it.

The workflow you are trying to support is using vault to generate the certs instead of CRDBs self-signed version?

@oliverisaac
Copy link
Author

The workflow you are trying to support is using vault to generate the certs instead of CRDBs self-signed version?

Yes, in general that's what I'm trying to support. Though, since I've made this PR, there are other fields I need to add to set cockroach up to not use --insecure while also not using the cert self signer.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants