Add webbhok CA to every service (hobbyfarm#407)

jggoebel · Jan 31, 2024 · 1e54583 · 1e54583
1 parent e57cb15
commit 1e54583
Show file tree

Hide file tree

Showing 5 changed files with 40 additions and 0 deletions.
diff --git a/charts/hobbyfarm/templates/accesscode-service/deployment.yaml b/charts/hobbyfarm/templates/accesscode-service/deployment.yaml
@@ -45,8 +45,16 @@ spec:
             mountPath: "/etc/ssl/certs/tls.crt"
             subPath: tls.crt
             readOnly: true
+          - name: webhook-secret
+            mountPath: "/webhook-secret/ca.crt"
+            subPath: ca.crt
+            readOnly: true
       volumes:
       - name: accesscode-secret
         secret:
           secretName: hobbyfarm-grpc-secret
+          optional: false
+      - name: webhook-secret
+        secret:
+          secretName: hobbyfarm-webhook-secret
           optional: false
diff --git a/charts/hobbyfarm/templates/authn-service/deployment.yaml b/charts/hobbyfarm/templates/authn-service/deployment.yaml
@@ -48,8 +48,16 @@ spec:
             mountPath: "/etc/ssl/certs/tls.crt"
             subPath: tls.crt
             readOnly: true
+          - name: webhook-secret
+            mountPath: "/webhook-secret/ca.crt"
+            subPath: ca.crt
+            readOnly: true
       volumes:
       - name: authn-secret
         secret:
           secretName: hobbyfarm-grpc-secret
+          optional: false
+      - name: webhook-secret
+        secret:
+          secretName: hobbyfarm-webhook-secret
           optional: false
diff --git a/charts/hobbyfarm/templates/authr-service/deployment.yaml b/charts/hobbyfarm/templates/authr-service/deployment.yaml
@@ -45,8 +45,16 @@ spec:
             mountPath: "/etc/ssl/certs/tls.crt"
             subPath: tls.crt
             readOnly: true
+          - name: webhook-secret
+            mountPath: "/webhook-secret/ca.crt"
+            subPath: ca.crt
+            readOnly: true
       volumes:
       - name: authr-secret
         secret:
           secretName: hobbyfarm-grpc-secret
+          optional: false
+      - name: webhook-secret
+        secret:
+          secretName: hobbyfarm-webhook-secret
           optional: false
diff --git a/charts/hobbyfarm/templates/gargantua/deployment.yaml b/charts/hobbyfarm/templates/gargantua/deployment.yaml
@@ -48,8 +48,16 @@ spec:
             mountPath: "/etc/ssl/certs/tls.crt"
             subPath: tls.crt
             readOnly: true
+          - name: webhook-secret
+            mountPath: "/webhook-secret/ca.crt"
+            subPath: ca.crt
+            readOnly: true
       volumes:
       - name: auth-secret
         secret:
           secretName: hobbyfarm-grpc-secret
           optional: false
+      - name: webhook-secret
+        secret:
+          secretName: hobbyfarm-webhook-secret
+          optional: false
diff --git a/charts/hobbyfarm/templates/rbac-service/deployment.yaml b/charts/hobbyfarm/templates/rbac-service/deployment.yaml
@@ -48,8 +48,16 @@ spec:
             mountPath: "/etc/ssl/certs/tls.crt"
             subPath: tls.crt
             readOnly: true
+          - name: webhook-secret
+            mountPath: "/webhook-secret/ca.crt"
+            subPath: ca.crt
+            readOnly: true
       volumes:
       - name: rbac-secret
         secret:
           secretName: hobbyfarm-grpc-secret
+          optional: false
+      - name: webhook-secret
+        secret:
+          secretName: hobbyfarm-webhook-secret
           optional: false