-
Notifications
You must be signed in to change notification settings - Fork 702
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Update kubeappsapis and kubeops to support CA for pinniped-proxy #4958
Conversation
f249d0e
to
ee2141c
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Great, thanks!
cmd/kubeops/cmd/root.go
Outdated
@@ -65,6 +65,7 @@ func setFlags(c *cobra.Command) { | |||
c.Flags().Int64Var(&serveOpts.Timeout, "timeout", 300, "Timeout to perform release operations (install, upgrade, rollback, delete)") | |||
c.Flags().StringVar(&serveOpts.ClustersConfigPath, "clusters-config-path", "", "Configuration for clusters") | |||
c.Flags().StringVar(&serveOpts.PinnipedProxyURL, "pinniped-proxy-url", "http://kubeapps-internal-pinniped-proxy.kubeapps:3333", "internal url to be used for requests to clusters configured for credential proxying via pinniped") | |||
c.Flags().StringVar(&serveOpts.PinnipedProxyCACert, "pinniped-proxy-ca-cert", "", "Custom certificate authority to use with requests to pinniped-proxy service") |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Can't recall right now, but, didn't we have a root.test.go file with a simple test adding each cmd argument? If so, it'd be great if we also add this param to the test.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Yep, done, thanks.
ee2141c
to
9dfad4c
Compare
Signed-off-by: Michael Nelson <minelson@vmware.com>
Signed-off-by: Michael Nelson <minelson@vmware.com>
Signed-off-by: Michael Nelson <minelson@vmware.com>
1532feb
to
5962adc
Compare
✅ Deploy Preview for kubeapps-dev canceled.
|
Signed-off-by: Michael Nelson minelson@vmware.com
Description of the change
Following on from #4951 , this PR updates the clients of pinniped-proxy to support a CA cert to use when communicating with pinniped-proxy
Benefits
With this (and some chart changes, coming next), I'm able to configure communication with pinniped-proxy over TLS.
Possible drawbacks
Applicable issues
Additional information