adding Postgres client certificate secret,mount overlay

michaelalang · May 31, 2024 · ec6adda · ec6adda
1 parent ce015df
commit ec6adda
Showing 1 changed file with 14 additions and 0 deletions.
diff --git a/kustomize/base/quay.deployment.yaml b/kustomize/base/quay.deployment.yaml
@@ -33,6 +33,18 @@ spec:
                   name: cluster-trusted-ca
               - secret:
                   name: extra-ca-certs
+        - name: postgres-certs
+          projected:
+            sources:
+            - secret:
+              name: postgresql-ca
+              optional: true
+            - secret:
+              name: postgresql-client-certs
+              optional: true
+        - name: postgres-certs-store
+          emptyDir:
+            sizeLimit: 5m
       affinity:
         podAntiAffinity:
           preferredDuringSchedulingIgnoredDuringExecution:
@@ -129,3 +141,5 @@ spec:
             - name: extra-ca-certs
               readOnly: true
               mountPath: /conf/stack/extra_ca_certs
+            - name: postgres-certs
+              mountPath: /.postgres