Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

MGMT-16508: Add API to AgentServiceConfig CRD to allow pass of CA certificates for image pull. #5884

Merged
merged 1 commit into from
Jan 30, 2024

Commits on Jan 29, 2024

  1. MGMT-16508: Add API to AgentServiceConfig CRD to allow pass of CA cer…

    …tificates for image pull.
    
    This PR introduces a new field to the AgentServiceConfig CRD `imagePullCAConfigMap` which is a LocalObjectReference to a config map containing CA certificates
    These certificates are to be used by the image service for the purpose of verifying the CA of HTTPS connections used for pulling images.
    
    `imagePullConfigMap` is expected to reference a ConfigMap containing a single file `extra-ca.pem` which contains the CA certificate.
    If multiple CA certificates are to be used, the user is expected to append these into the same PEM.
    
    This code also passes the path `ADDITIONAL_CA_FILE` to the image service if the additional CA file is present.
    
    This code sets up the Volume for this and maps to either an empty directory or maps the content of the ConfigMap.
    
    This will ensure that the CA's will be available for use by the image service.
    paul-maidment committed Jan 29, 2024
    Configuration menu
    Copy the full SHA
    c4f131d View commit details
    Browse the repository at this point in the history