Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

refactor: [experimental] create TLS certificate via code & save it in a PersistentVolume #421

Draft
wants to merge 9 commits into
base: main
Choose a base branch
from
Next Next commit
mounted and shared perssitentvolume to webhook deployment
  • Loading branch information
royhadad committed Jul 13, 2023
commit 92da24699d68b69d2a5e94c0807e0796419cedde
17 changes: 17 additions & 0 deletions charts/datree-admission-webhook/templates/deployment.yaml
Original file line number Diff line number Diff line change
@@ -106,13 +106,18 @@ spec:
- containerPort: 5555
name: debug
volumeMounts:
- mountPath: /app/folder
name: volume
- name: webhook-tls-certs
mountPath: /run/secrets/tls
readOnly: true
- name: webhook-config
mountPath: /config
readOnly: true
volumes:
- name: volume
persistentVolumeClaim:
claimName: volume-claim
- name: webhook-tls-certs
secret:
secretName: webhook-server-tls
@@ -125,3 +130,15 @@ spec:
- configMap:
name: webhook-scanning-filters
optional: true
---
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
name: volume-claim
namespace: datree
spec:
accessModes:
- ReadWriteMany
resources:
requests:
storage: 2Gi
2 changes: 1 addition & 1 deletion internal/fixtures/values.dev.yaml
Original file line number Diff line number Diff line change
@@ -6,7 +6,7 @@
# The name of the namespace all resources will be created in, if not specified in the release.
namespace: ""
# The number of Datree webhook-server replicas to deploy for the webhook.
replicaCount: 1
replicaCount: 2
# Additional labels to add to all resources.
customLabels: { }
# Additional annotations to add to all resources.