mirror of
https://github.com/edgelesssys/constellation.git
synced 2025-01-30 01:03:31 -05:00
e9694d40b9
Bumping Cilium to also enable node-to-node encryption and node-to-node strict mode. Since the second is not upstream we use our fork.
18 lines
707 B
YAML
18 lines
707 B
YAML
{{- if or
|
|
(and (or .Values.externalWorkloads.enabled .Values.clustermesh.useAPIServer) .Values.clustermesh.apiserver.tls.auto.enabled (eq .Values.clustermesh.apiserver.tls.auto.method "helm"))
|
|
(and (or .Values.agent .Values.hubble.relay.enabled .Values.hubble.ui.enabled) .Values.hubble.enabled .Values.hubble.tls.enabled .Values.hubble.tls.auto.enabled (eq .Values.hubble.tls.auto.method "helm"))
|
|
(and .Values.tls.ca.key .Values.tls.ca.cert)
|
|
-}}
|
|
|
|
{{- $_ := include "cilium.ca.setup" . -}}
|
|
---
|
|
apiVersion: v1
|
|
kind: Secret
|
|
metadata:
|
|
name: {{ .commonCASecretName }}
|
|
namespace: {{ .Release.Namespace }}
|
|
data:
|
|
ca.crt: {{ .commonCA.Cert | b64enc }}
|
|
ca.key: {{ .commonCA.Key | b64enc }}
|
|
{{- end }}
|