-
-
Notifications
You must be signed in to change notification settings - Fork 262
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
feat: add support for client TLS certs #280
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Hello there! Thanks for the PR :)
Got a few suggestions
{{- if .Values.certs.enabled }} | ||
- name: {{ include "oathkeeper.name" . }}-certs | ||
secret: | ||
secretName: {{- if .Values.certs.existingSecret }} |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
secretName: {{- if .Values.certs.existingSecret }} | |
secretName: {{- .Values.certs.existingSecret }} |
@@ -42,16 +42,21 @@ spec: | |||
- name: {{ include "oathkeeper.name" . }}-config-volume | |||
configMap: | |||
{{- if .Values.demo }} | |||
name: {{ include "oathkeeper.fullname" . }}-config-demo | |||
name: {{ include "oathkeeper.name" . }}-config-demo |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Please do not change this, and use fullname
. This allows installation of multiple instances without resource overlapping.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I think it would make sense to use the extraVolume pattern we have in Ory Kratos instead: https://github.com/ory/k8s/blob/master/helm/charts/kratos/values.yaml#L167-L179 :)
I can work on introducing that pattern |
As per ory/oathkeeper#744 (comment) marking this as draft |
There's a hard and fast addition of extraVolume's at #330 - I found myself to need it to get TLS certs into the pod :) |
I'd say lets deprecate this PR in favour of #330. @christian-roggia are you ok with this? |
Yes. |
Related issue
ory/oathkeeper#744