Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add ExtraVolumeMounts to WGE helm to support custom CA #3713

Open
Tracked by #3026
MostafaMegahid opened this issue Dec 12, 2023 · 1 comment
Open
Tracked by #3026

Add ExtraVolumeMounts to WGE helm to support custom CA #3713

MostafaMegahid opened this issue Dec 12, 2023 · 1 comment
Labels
area/cli issues related to gitops ee cli team/timber-wolf

Comments

@MostafaMegahid
Copy link

Background

Potential customer (RBC Capital Markets) is trying to use WGE in their environment and will need to mount a custom CA bundle to validate the OIDC connection to the OIDC authentication service.
The WGE installation Helm chart currently does not support extravolumemounts, so this can only be done by using a postdeployment patch, which is not ideal.

Objective

Add the ability to add custom extravolumemounts to the Helm chart values.

@MostafaMegahid MostafaMegahid added team/timber-wolf area/cli issues related to gitops ee cli labels Dec 12, 2023
@bigkevmcd
Copy link
Contributor

bigkevmcd commented Dec 12, 2023

The recommended way to do this (using a post-render patch) is...

So, providing a CA Bundle ConfigMap should update the server Deployment resource appropriately.

  postRenderers:
    - kustomize:
        patchesStrategicMerge:
          - apiVersion: apps/v1
            kind: Deployment
            metadata:
              name: weave-gitops-enterprise-mccp-cluster-service
              namespace: flux-system
            spec:
              template:
                spec:
                  containers:
                    - name: clusters-service
                      volumeMounts:
                        - mountPath: /usr/local/share/ca-certificates
                          name: custom-ca
                      env:
                        - name: SSL_CERT_FILE
                          value: /usr/local/share/ca-certificates/ca-bundle.crt
                  volumes:
                    - configMap:
                        defaultMode: 420
                        name: custom-ca
                      name: custom-ca

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area/cli issues related to gitops ee cli team/timber-wolf
Projects
None yet
Development

No branches or pull requests

2 participants