Improve upstream CA

Signed-off-by: Marco Franssen <[email protected]> Signed-off-by: Marco Franssen <[email protected]>
2023-02-18 13:04:08 +01:00
parent 1ee42c53d3
commit fe38a52a95
5 changed files with 31 additions and 24 deletions
@@ -0,0 +1,15 @@
+{{- if eq (.Values.server.config.upstreamAuthority.disk.enabled | toString) "true"}}
+apiVersion: v1
+kind: Secret
+metadata:
+  name: {{ include "spire.fullname" . }}-upstream-ca
+  namespace: {{ .Release.Namespace }}
+  labels:
+    {{- include "spire.server.labels" . | nindent 4 }}
+data:
+  tls.crt: {{ .Values.server.config.upstreamAuthority.disk.certificate | toYaml | indent 2 }}
+  tls.key: {{ .Values.server.config.upstreamAuthority.disk.key | toYaml | indent 2 }}
+  {{- if ne .Values.server.config.upstreamAuthority.disk.bundle ""}}
+  bundle.crt: {{ .Values.server.config.upstreamAuthority.disk.bundle | toYaml | indent 2 }}
+  {{- end }}
+{{- end }}